[Pkg-gnupg-maint] Bug#698783: Trust checking always happens even for --(hidden-)encrypt-to
Kwadronaut-debian
kwadronaut-debian at riseup.net
Wed Jan 23 15:25:10 UTC 2013
Package: gnupg
Version: 1.4.12-7
Severity: normal
The manpage describes for both --hidden-encrypt-to and --encrypt-to 'No
trust checking is performed for these user ids and even disabled keys
can be used.' I tried to use this functionality with both an expired and
a revoked key and with both this doesn't seem to be possible, using the
--expert option for doing 'certain nonsensical or "silly" things'
doesn't make any difference, get the following output:
gpg: keyid: skipped: unusable public
key gpg: foo.txt: encryption failed: unusable public key
I see a couple of possibilities here: I'm misunderstanding what trust
checking entails, the manpage isn't explicit enough that the only thing
it won't check is the trustdb, or the tool is following the relevant
RFCs more strict as the manpage.
I think -but am unsure- that the manpage should be more explicit and add
a phrase like: Expired and revoked keys can't be used.
Another possibility would be aligning the software to the manpage,
something which I'd prefer but can't help with.
-- System Information:
Debian Release: 7.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages gnupg depends on:
ii dpkg 1.16.9
ii gpgv 1.4.12-7
ii install-info 4.13a.dfsg.1-10
ii libbz2-1.0 1.0.6-4
ii libc6 2.13-37
ii libreadline6 6.2-8
ii libusb-0.1-4 2:0.1.12-20+nmu1
ii zlib1g 1:1.2.7.dfsg-13
Versions of packages gnupg recommends:
ii gnupg-curl 1.4.12-7
ii libldap-2.4-2 2.4.31-1
Versions of packages gnupg suggests:
ii eog 3.4.2-1+build1
pn gnupg-doc <none>
ii imagemagick 8:6.7.7.10-5
ii libpcsclite1 1.8.4-1
-- no debconf information
More information about the Pkg-gnupg-maint
mailing list