gpg: error retrieving 'erich at eckner.net' via WKD: Connection closed in DNS

Erich Eckner gnupg at eckner.net
Tue Jan 19 18:23:03 CET 2021


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Stefan,

thanks for your answer.

On Tue, 19 Jan 2021, Stefan Claas wrote:

> On Tue, Jan 19, 2021 at 5:24 PM Erich Eckner via Gnupg-users
> <gnupg-users at gnupg.org> wrote:
>>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA256
>>
>> Hi,
>>
>> I'm playing around with my WKD setup (guess, why) and encountered the
>> error in the subject when doing `gpg -vvvv --locate-external-keys
>> erich at eckner.net`. Retrieving via curl and the manually-constructed url
>> works fine, also I cannot find any problems in dns on that box. A second
>> box shows the same behaviour, but on a third machine, it works. All three
>> run the latest arch linux :-/
>>
>> What can cause a "Connection closed in DNS" error? (Maybe the error
>> message can be improved: Doesn't dns use udp by default, which is
>> connectionless?)
>
> I did a quick check and according to Wiktor's WKD checker the direct-method
> says that key is missing and the advanced method seems to be ok. sq.exe can
> fetch your key and when I do a gpg --locate-keys erich at eckner.net it
> fetches also a couple of others from you (with differrent email addresses
> , which I must admit I do not understand why and would probably not need
> when communicating with you.

Yes, this is the proper behaviour (which I also see on one machine of the 
three mentioned machines):

Advanced method is set up, direct method is not. The key has multiple UIDs 
(one for each of my email addresses). Or did I do something wrong when 
exporting the key to the WKD? Should I have removed the other UIDs there? 
(how?)

However, on two machines, I only get this strange "Connection closed in 
DNS" error. Ah, wait, I checked again, and one box says:
"gpg: error retrieving 'erich at eckner.net' via WKD: Permission denied"

Something is oddly wrong :-/

>
> Regards
> Stefan
>

regards,
Erich
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE3p92iMrPBP64GmxZCu7JB1Xae1oFAmAHFXgACgkQCu7JB1Xa
e1rSvBAAttQc553QJAWAsjmSMEDAYp21pOiRLGcPEGInkhcF2DvQaLpW2Y4WQZR+
Xj+m8hOf3IbYPHs7k07Xqu35oD0KrXh//lPkZ0kben/EkY2TMzMjuwvZhW9KN9do
QMiZJ8DfEiD2E88EliwqTDZoLsjpjtZLEfMjd0Cp/nk2r1LqPmLzYCDvjh2kxhyt
1W16B/xsnB9ITsb3odDcuGxRA4dPuWwuX9z1qIiInXqBFP39P4W/6Fi3aKPm1aOq
Dir0uygAWDKytV7XNZlFsKqGc4ndOmj398LWHS0dSIg/EYOOS4O8ja/SGiacNKu+
l26DkWiECZk7FQDvKZuzCZbxbdSIej8fPa1m4adTCB0nR9XZCimg0EZHKlzfK/7A
88IPNq1UuMsTDimimROh0wR8ZZFRLFkEdMf/IB5pGE9nfOFhOc0sXIsmnO60ZoJa
pmstR0mjuicDd0bsPHl3QDx9zTjqz5448MOCGfelBgfbxWVB4TmSKQxLqoqTmVyB
1z+fuDq+IjUzHt3RyjwebMOMZlwRuZjEvdwOFwz/+NdjqEHpX6z4sWpRlrZmyq7w
vIL4lrdBUuOqCxZmkIbMZMVQOu+ZMoRzA44cvMZAIMhYoTvmL5NjzL6LWlMv0jRo
pSk+QMFMnxoVFr/8ntlJN+vSjVuTHVgSUXrb1YltsWLfR2Uy4wg=
=YNH1
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list