Key signing with non-primary UID

stebe at mailbox.org stebe at mailbox.org
Tue Jan 26 02:49:30 CET 2016


Hi,


some ways to achieve what you pretend,

# sign (effectively)
gpg2 --edit-key [name or email address or short/long keyID or, better,
fingerprint of your contact]
gpg> sign -u [your non-primary uid for signing given as name or email
address]

# sign only locally, i.e. it does not leave your computer
gpg2 --edit-key [name or email address or short/long keyID or, better,
fingerprint of your contact]
gpg> lsign -u [your non-primary uid for signing given as name and/or email
address]

# checking it
gpg2 --list-sigs [name or email address or short/long keyID or, better,
fingerprint of your contact]

# between "sig" and the keyID of your contact you should see an "L" now

# You might as well use 
gpg2 --local-user [your non-primary uid for signing given as name and/or
email address] --edit-key [name or email address or short/long keyID or,
better, fingerprint of your contact] --lsign-key [name or email address or
short/long keyID or, better, fingerprint of your contact]

References:
(1) README of 1.4.20, but it works with 2.0.x and 2.1.x versions of GnuPG
as well (see quote below)
(2) manpages
(3) gnupg.info

(1) GnuPG - The GNU Privacy Guard
                   -------------------------------
                            Version 1.4.20

         Copyright 1998-2015 Free Software Foundation, Inc.
         Copyright 1997-2015 Werner Koch
[...]

    Okay, here is how GnuPG helps you with key management.  Most stuff
    is done with the --edit-key command

        gpg --edit-key <keyid or username>

    GnuPG displays some information about the key and then prompts
    for a command (enter "help" to see a list of commands and see
    the man page for a more detailed explanation).  To sign a key
    you select the user ID you want to sign by entering the number
    that is displayed in the leftmost column (or do nothing if the
    key has only one user ID) and then enter the command "sign" and
    follow all the prompts.  When you are ready, give the command
    "save" (or use "quit" to cancel your actions).

    If you want to sign the key with another of your user IDs, you
    must give an "-u" option on the command line together with the
    "--edit-key".

HTH

Stebe



More information about the Gnupg-users mailing list