[Pkg-gnupg-maint] Bug#683339: gnupg: gpg moves illegal signature to the wrong place

Clint Adams clint at debian.org
Mon Jul 30 21:58:05 UTC 2012


Package: gnupg
Version: 1.4.10-4

This key has two signatures on a subkey.

http://keys.mayfirst.org/pks/lookup?op=get&search=0xED34CEABE27BAABC

gpg --edit-key will correctly detect them as being in the wrong place,
and move them to another wrong place, unless the uid/uat being moved
to happens to be the target of the signature.

Since sks appears to be buggy, those signatures will remain on the
subkey, and be replaced on a --recv-keys or --refresh.  Then
a subsequent --edit-key will move them again.

It would be nice if something could prevent these things from happening.



More information about the Pkg-gnupg-maint mailing list