WKD question

Dmitry Alexandrov dag at gnui.org
Tue Aug 4 18:17:56 CEST 2020


Werner Koch via Gnupg-users <gnupg-users at gnupg.org> wrote:
> On Sun,  2 Aug 2020 07:38, Dmitry Alexandrov said:
>> I dunno why @wk at gnupg.org did that
>
> I have a post-it on my CA laptop to add a signing subkey to my new key, I should really do that soon.

Maybe, you would like to update an expired key in DNS as well?

By the way, it would be nice, if GPG were not interpreting locating an expired key as success, but continued with the next method instead:

	$$ gpg --auto-key-locate dane,wkd --locate-key wk at gnupg.org
	gpg: key F2AD85AC1E42B367: public key "Werner Koch <wk at gnupg.org>" imported
	gpg: Total number processed: 1
	gpg:               imported: 1
	pub   dsa2048 2007-12-31 [SC] [expired: 2018-12-31]
	      80615870F5BAD690333686D0F2AD85AC1E42B367
	uid           [ expired] Werner Koch <wk at gnupg.org>


>> BTW, does anyone remember, how to command gpg(1) to print the above in a human-readable format?  There was some incantation, IIRC, but GPGʼs
>
>   gpg --locate-external-key -v foo at example.rog
>
> looks up foo at example.org even if a key with that user id already exists.

No, thanks, thatʼs not what I forgot, I was nonplussed by the fact, that --with-subkey-fingerprint has no any effect when --show-key is implied, while --with-colons has [<eeop6k9l.dag at gnui.org>].

@kloecker at kde.org had resolved [<1803396.a0EWGg1j7a at breq>] my confusion already.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 247 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20200804/ec424aad/attachment.sig>


More information about the Gnupg-users mailing list