DANE-OpenPGPkey lookup with GnuPG

Damien Goutte-Gattat dgouttegattat at incenp.org
Tue Sep 13 15:54:24 CEST 2016


On 09/12/2016 11:54 PM, Rene "Renne" Bartsch, B.Sc. Informatics wrote:
> I'm trying to look up public OpenPGP-keys published via DNSSEC (IETF RFC
> 7929) using the command 'gpg2 --auto-key-locate dane --search-keys
> info at mail.de'
> What's wrong with my command or gpg2?

I think the --search-keys command is specifically meant to retrieve keys 
from keyservers.

To retrieve a key using the auto-key-locate mechanisms, use the 
--locate-keys command instead:

   $ gpg2 --auto-key-locate dane --locate-keys info at mail.de
   gpg: key 94206060: public key "info at mail.de <info at mail.de>" imported
   gpg: Total number processed: 1
   gpg:               imported: 1
   gpg: automatically retrieved 'info at mail.de' via DANE
   pub   rsa4096/94206060 2015-03-11 [SCA] [expires: 2020-03-09]
   uid         [ unknown] info at mail.de <info at mail.de>
   sub   rsa4096/8113910E 2015-03-11 [E] [expires: 2020-03-09]


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: OpenPGP digital signature
URL: </pipermail/attachments/20160913/84760afb/attachment-0001.sig>

More information about the Gnupg-users mailing list