gnupg 2.1.16: change of option --with-fingerprint

[Werner Koch]

On Sat,  1 Jul 2017 16:46, linux_nutzer42 at mailbox.org said:

> When I tried to import a CentOS gpg key according to the manual from [1], I made the following observation:
>
> "gpg --quiet --with-fingerprint <file path>" does not return the fingerprint when using gnupg 2.1.17 (on ArchLinux and openSuse Tumbleweed).

That manual suggest the use of an unspecified behavior.  Namely that gpg
tries to do the right thing depending on the data.  For keys you will
see only some kind of debug output which funnily resembles a key
listing.  But it is not a real key listing.  Recent version of gpg thus
print

  gpg: WARNING: no command supplied.  Trying to guess what you mean ...

What you need to do instead is to import that key and then run 

  gpg -k --with-fingerprint security at centos.org

or

  gpg --fingerprint security at centos.org

which shows the fingerprint.  Here -k and --fingerprint are the
commands.  If you don't want to import the key and your version of gpg
is at least 2.1.14 you can do this:

  gpg -n --import --import-options import-show FILE_WITH_KEY

This tells the import command to list the key during input (import-show)
and not to actually import (-n or --dry-run)

In case you want to script this, please make sure to also add
--with-colons so that you get the guaranteed to be stable machine
readable output.


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: </pipermail/attachments/20170704/e2f30f19/attachment.sig>