[Pkg-gnupg-maint] Bug#683339: gnupg: gpg moves illegal signature to the wrong place
Clint Adams
clint at debian.org
Mon Jul 30 21:58:05 UTC 2012
Package: gnupg
Version: 1.4.10-4
This key has two signatures on a subkey.
http://keys.mayfirst.org/pks/lookup?op=get&search=0xED34CEABE27BAABC
gpg --edit-key will correctly detect them as being in the wrong place,
and move them to another wrong place, unless the uid/uat being moved
to happens to be the target of the signature.
Since sks appears to be buggy, those signatures will remain on the
subkey, and be replaced on a --recv-keys or --refresh. Then
a subsequent --edit-key will move them again.
It would be nice if something could prevent these things from happening.
More information about the Pkg-gnupg-maint
mailing list