Failure of comparison of valid pub key's .asc files

J B jb.1234abcd at gmail.com
Sun Feb 21 22:24:51 CET 2016


Hi,

My system is Arch linux.
Linux myhost 4.4.1-2-ARCH #1 SMP PREEMPT Wed Feb 3 13:12:33 UTC 2016 x86_64
GNU/Linux
gnupg 2.1.11-1
gpgme 1.6.0-2
libgpg-error 1.21-1

I have a problem with comparing contents of publick key ascii files from two
sources:

1. downloaded from web page .asc file
$ cat 0xC65285EC.asc
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2
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=
=EkJT
-----END PGP PUBLIC KEY BLOCK-----
$
$ gpg --import 0xC65285EC.asc
gpg: key C65285EC: public key "trava90 <travawine at protonmail.com>" imported
gpg: Total number processed: 1
gpg:               imported: 1
gpg: no ultimately trusted keys found
$
$ gpg --check-sigs C65285EC
gpg: 2 good signatures
gpg: 1 signature not checked due to a missing key
pub   rsa2048/C65285EC 2015-03-15 [SC]
uid         [ unknown] trava90 <travawine at protonmail.com>
sig!3        C65285EC 2015-03-15  trava90 <travawine at protonmail.com>
sub   rsa2048/25192F9F 2015-03-15 [E]
sig!         C65285EC 2015-03-15  trava90 <travawine at protonmail.com>
$

2. downloaded from key server .asc file
$ gpg --delete-keys C65285EC
$ gpg --keyserver hkp://pgp.mit.edu --recv-keys C65285EC
gpg: key C65285EC: public key "trava90 <travawine at protonmail.com>" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1
$ gpg --check-sigs C65285EC
gpg: 2 good signatures
gpg: 2 signatures not checked due to missing keys
pub   rsa2048/C65285EC 2015-03-15 [SC]
uid         [ unknown] trava90 <travawine at protonmail.com>
sig!3        C65285EC 2015-03-15  trava90 <travawine at protonmail.com>
sub   rsa2048/25192F9F 2015-03-15 [E]
sig!         C65285EC 2015-03-15  trava90 <travawine at protonmail.com>
$ gpg --armor --output 0xC65285EC-key-server.asc --export C65285EC
$ cat 0xC65285EC-key-server.asc
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2

mQENBFUGFsQBCACV0oz1c96lPXq//jqEZLf3cWcv6bS5YSTbi9h1SH+O846Xl/DG
iVNx+FQyt7oiyCnkd0sL2HLHut6GUSvBvpdFO32DTHxcV6ibE+vQ0SeXzLOLRVBT
jrFORwSVZ5IcW6y9Hs/PusUOzT4MA6JOvuRFD8UVYETZCU3z3GPXYBztiqcsqo2p
2srJmxlRUNKHI5XM0h4Q03LqBqi23g+5cijyj5TX6X5ubIHNUc2KQcGtA5JYbvyc
HvGsQK6umWQPgK7rO4L8doAD1kxpEhm+ckLXUfxSoKEUDOExSN0A7+bozDsV5a6j
CfQvOtVe4KLN1IayFEmRWdl9AEKL/w6f2oBfABEBAAG0InRyYXZhOTAgPHRyYXZh
d2luZUBwcm90b25tYWlsLmNvbT6IXgQTEQgABgUCVkhriAAKCRASC7DTbaXyrJ5i
AQCnGPM7i1UPxW245TxhQakxWrQ+byHIdr7lXtEHmSV5IAD9HYNresy1CgRwAR+3
qnILS0ZK1zu4ojLEaLWXFTzsC7WJATcEEwEIACEFAlUGFsQCGwMFCwkIBwIGFQgJ
CgsCBBYCAwECHgECF4AACgkQhl5sh8ZShey4mgf9EaBrcFOBxFACCJdWH5zXl+Qt
+web3WZ9ELebpu9nTV7gta40Zy1Zc5FUGSxI9sxfbbSkc0Ob6eSx7qisZhOtaekz
g7t1DU4xPDNkzAUhj7P+soQeFNGwU0h7V58lMbjVVSXbGTgVm0FHndC5QbwK5Qzn
lGzA6nmzXDiFqd/asHa/1KMk4d8JDgotcsHcqYhkW4bv1tj4jSDquG2iyEj1eE3u
7nIrfDGMlCweeBclLWVGG4RVfFXrBMr21NE0bRsiJF5c1PNsC8tmzTPfCVWvZauv
heFptUzs2d+YjxSjkDAEUYV3EVGvzD1rhH630u/lLA/CSOHqQnTT5jbQkRzTxokC
HAQTAQIABgUCVVdfxgAKCRBASB57j8+c7IgbEACwOsKosf0ZaPon9jkih8oGgdaK
rxNQuQZK13hICBMaol7ufjwcmf0Im5sGfdB1McpOL+bd5kDRicBtSZtORrV76H4A
y5DhevbIgrClC3XGwpdl4vRSmzybekyYUaunY6dAVKDDMUxDJTo4S1+MBC93wYTx
llunL4voBAyqmWxD2wUXLripbwE70jHk3HGZRwPWZ0JZ4VJUFduEL/UdL6gKbu0B
jUQAOq9alQsnKUkZwBatcrYqRTrdQQZ1NNmYr3NZwtc/87y/EDLaEG7nQrR6Pm8t
ImiFRVhd12Qw27KmUyyQeijuW9XqXUDA1yF+IqR0ZBaesGes/hAsFdZDdWk27x/1
Pe+UNONgsy1rsy9GiTeyd+GcDBH3A1TVoXjJB1A06S7KUQsUDWBOlH5iW5LzEk2w
eQt1dB9O35gIiZ2tdkxRO0bHecx6+O2WlkOcYlOhTqy37PeRL3q2s5ItxNuxeEsX
WRu9GgGbMEFgkB3T9pCu2RG+bD+XFSVpRYZ4X+hiT9KEuczuB4gXDMqAA5BL20K2
QH31PrlL6vRP7bkvrcUr/Ovoy1AqRJY66ivVuyviDGuJd5iGsYvt+OOPN4J/xRl8
NVHw6Fz9cND/4PVZLrgJdirQ85y/3poaOjhB3iaYau1iw2D0zPX6Aob4x/VJEUhD
K0gG9M2NzyGnYJJrk7kBDQRVBhbEAQgA4WajOd4mWXhz4jTfnR4gFdwCKUtE0DjI
NTOHetEpgPDSwJ51NQgTEcOz1ieUHML6jt/BNZMbdoVKyBcrnagnjHXvCOdQD0I4
TlreixIQ05hi7yf83Jez7EcNNodOXjWtO/iSnY2ULkaxiZbLfwnruWADM4gVvnUC
D2deZfRK8GVs+02YR3jkoGkLoR8wa0/YIFoSJIPa9RS+WwYuOkUyEBJNQGmrP2FB
MLsQgHNF0APQqldple7xNgY30DZTV7fRGnKoRGtsN1jlO2Gvcv8DCKRa38RFnm/5
1CBMaMjkyVdN0mnCtTgFYA071m3rUzpK/LkaIBS0Tr6DnlvRf5mmhwARAQABiQEf
BBgBCAAJBQJVBhbEAhsMAAoJEIZebIfGUoXsHecH/iIMPFpdtjXDN97ZCyTEIB/w
HaJIfUVxkH4oH8HKYVQQjJKkqdbJGK8j5oXDptY6YAPMryDfluOSlrvfGXWo4/dv
uB2XcfBfkKok59AaCQIxvpn4DVvC+di7dHbXSc/zymzQ13E6Dc6Y92BN6PVv4ezH
m3lMVSys5zP0XzVWH5nJ1y6ZzMyAw3LeCRPp0VPbjbOf6DoSII9xQhTKLryVuuNh
ZDh79gAfIBLHBGusmqGgG2t6Raknbl7J3nSR6zS+YzNVNhe7431Xu5tS1JdXlpAj
rGewMlLZNK6Nm1ea5kiHFX88Ue65Kql7Ek/08TC+RSh4SO4aCSYgq9YuNStVrco=
=mI1y
-----END PGP PUBLIC KEY BLOCK-----
$

Note the difference in output from 'gpg --check-sigs C65285EC':

case 1.
gpg: 1 signature not checked due to a missing key

case 2.
gpg: 2 signatures not checked due to missing keys

Both .asc files represent the same public key, and when imported into gpg,
correctly verify a signed app executable.
But when I compare them, they differ:
$ diff 0xC65285EC.asc 0xC65285EC-key-server.asc
10c10,12
< d2luZUBwcm90b25tYWlsLmNvbT6JATcEEwEIACEFAlUGFsQCGwMFCwkIBwIGFQgJ
---
> d2luZUBwcm90b25tYWlsLmNvbT6IXgQTEQgABgUCVkhriAAKCRASC7DTbaXyrJ5i
> AQCnGPM7i1UPxW245TxhQakxWrQ+byHIdr7lXtEHmSV5IAD9HYNresy1CgRwAR+3
> qnILS0ZK1zu4ojLEaLWXFTzsC7WJATcEEwEIACEFAlUGFsQCGwMFCwkIBwIGFQgJ
40c42
< =EkJT
---
> =mI1y
$

Where is the problem ?
The --export option to .asc entry ?
The --import option from key server entry ?
Something about the key stored on key servers (I imported it from two
servers
with the same result) ?
Anything else ?

Thanks,
jb
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/attachments/20160221/5785c12f/attachment-0001.html>


More information about the Gnupg-users mailing list