[pkg-gnupg-maint] Bug#811146: Bug#811146: gnupg2: gpg2.1 failing to handle hkps keyservers

Daniel Kahn Gillmor dkg at fifthhorseman.net
Mon Jan 25 20:24:22 UTC 2016


Hi Phil--

On Fri 2016-01-15 23:07:53 -0500, Phil Dibowitz wrote:
> Sometime recently gpg2.1 stopped handling HKPS keyservers. dirmngr can
> still do it if I ask directly, but gpg2.1 won't. All of the debug info I
> can think of is below.
>
> Relevant ~/.gnupg/gpg.conf lines:
>
>   keyserver hkps://hkps.pool.sks-keyservers.net
>   keyserver-options auto-key-retrieve no-honor-keyserver-url include-revoked
>
> Relevant ~/.gnupg/dirmngr.conf lines:
>
>   hkp-cacert /usr/local/share/ca-certificates/sks-keyservers.netCA.pem
>
> When I try through gpg (first without debug for clarity) I get:
>
>   $ gpg --search-key 58E11BB1E414D9AD
>   gpg: error searching keyserver: General error
>   gpg: keyserver search failed: General error


this looks like gpg, since the 2.1 series is currently provided as
/usr/bin/gpg2.

what does gpg --version tell you?

gpg 2.1 never talks to the network itself at all; it relies entirely on
dirmngr to do that work.

        --dkg



More information about the pkg-gnupg-maint mailing list