Importing and using non-self-signed PGP keys

Robert J. Hansen rjh at sixdemonbag.org
Tue Oct 20 02:13:24 CEST 2015


> my organization issued to me a public/private PGP keypair
> that is not self signed.

Then they issued you a malformed certificate which cannot and must not
be used.  The self-sig is an essential part of every correctly-formed
OpenPGP certificate.  If you were issued a certificate lacking a
self-sig, then your issuer has a problem that needs to be corrected.

I wish I had better news for you, but a missing self-sig is pretty much
a big red stop sign.



More information about the Gnupg-users mailing list