Unable to change expiration date on primary key

Jesse Hathaway jhathaway at wikimedia.org
Tue Aug 13 19:08:39 CEST 2024


I have a key with two subkeys, the two subkeys have no expiration. I am
trying to remove the expiration date on the primary key, but the
suggested commands don't seem to have any effect and more strangely
don't seem to return any error messages or a non-zero exit code. I have
tried using both using the gpg console and the --quick-set-expire
option, but both have no effect. I have also tried extending the
expiration date, but the results are the same:

quick-set

    $ gpg --verbose --with-subkey-fingerprints --list-keys
AB48C7022E543EABE8021D6FB29E1E6371FDBFB6
    gpg: enabled compatibility flags:
    gpg: using pgp trust model
    gpg: checking the trustdb
    gpg: 2 keys processed (2 validity counts cleared)
    gpg: marginals needed: 3  completes needed: 1  trust model: pgp
    gpg: depth: 0  valid:   2  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 2u
    gpg: next trustdb check due at 2030-04-12
    pub   rsa4096 2021-12-10 [C] [expires: 2024-12-10]
          AB48C7022E543EABE8021D6FB29E1E6371FDBFB6
    uid           [ unknown] <jhathaway at wikimedia.org>
    uid           [ unknown] Jesse Hathaway
    sub   rsa4096 2021-12-10 [S]
          68324D0D9D86586CABBF5AA9ABA34714F5533665
    sub   rsa4096 2021-12-10 [E]
          F0A97995C8E8E79AD444BDAF7DE5A2D165656F60

    $ gpg --quick-set-expire AB48C7022E543EABE8021D6FB29E1E6371FDBFB6 0
    $ # no change

gpg console

    $ gpg --edit-key AB48C7022E543EABE8021D6FB29E1E6371FDBFB6
    gpg (GnuPG) 2.4.5; Copyright (C) 2024 g10 Code GmbH
    This is free software: you are free to change and redistribute it.
    There is NO WARRANTY, to the extent permitted by law.

    Secret key is available.

    gpg: checking the trustdb
    gpg: marginals needed: 3  completes needed: 1  trust model: pgp
    gpg: depth: 0  valid:   2  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 2u
    gpg: next trustdb check due at 2030-04-12
    sec  rsa4096/B29E1E6371FDBFB6
         created: 2021-12-10  expires: 2024-12-10  usage: C
         trust: unknown       validity: unknown
    ssb  rsa4096/ABA34714F5533665
         created: 2021-12-10  expires: never       usage: S
    ssb  rsa4096/7DE5A2D165656F60
         created: 2021-12-10  expires: never       usage: E
    [ unknown] (1). <jhathaway at wikimedia.org>
    [ unknown] (2)  Jesse Hathaway

    gpg> expire
    Changing expiration time for the primary key.
    Please specify how long the key should be valid.
             0 = key does not expire
          <n>  = key expires in n days
          <n>w = key expires in n weeks
          <n>m = key expires in n months
          <n>y = key expires in n years
    Key is valid for? (0)
    Key does not expire at all
    Is this correct? (y/N) y

    sec  rsa4096/B29E1E6371FDBFB6
         created: 2021-12-10  expires: 2024-12-10  usage: C
         trust: unknown       validity: unknown
    ssb  rsa4096/ABA34714F5533665
         created: 2021-12-10  expires: never       usage: S
    ssb  rsa4096/7DE5A2D165656F60
         created: 2021-12-10  expires: never       usage: E
    [ unknown] (1). <jhathaway at wikimedia.org>
    [ unknown] (2)  Jesse Hathaway

    gpg> save
    $ # no change

gpg version

    $ gpg --version
    gpg (GnuPG) 2.4.5
    libgcrypt 1.11.0
    Copyright (C) 2024 g10 Code GmbH
    License GNU GPL-3.0-or-later <https://gnu.org/licenses/gpl.html>
    This is free software: you are free to change and redistribute it.
    There is NO WARRANTY, to the extent permitted by law.

    Home: /home/jhathaway/.gnupg
    Supported algorithms:
    Pubkey: RSA, ELG, DSA, ECDH, ECDSA, EDDSA
    Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH,
            CAMELLIA128, CAMELLIA192, CAMELLIA256
    Hash: SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
    Compression: Uncompressed, ZIP, ZLIB, BZIP2



More information about the Gnupg-users mailing list