[pkg-gnupg-maint] Bug#874304: Bug#874304: gpg: --refresh-keys became extremely verbose and complaining

Francesco Poli invernomuto at paranoici.org
Tue Sep 5 21:10:06 UTC 2017


On Tue, 05 Sep 2017 10:43:09 +0200 Werner Koch wrote:

> On Mon,  4 Sep 2017 22:34, invernomuto at paranoici.org said:
> 
> > The output seems to be (more or less) the old output of
> > "gpg --refresh-keys $KEYID", combined with the output of
> > "gpg --check-sigs $KEYID".
> 
> That is likley due to
> 
>   * gpg: By default try to repair keys during import.  New sub-option
>     no-repair-keys for --import-options.
> 
> in 2.1.22.

Hello Werner,
thanks a lot for your super-prompt reply!

> To avoid this you should put
> 
> no-repair-keys
> 
> into gpg.conf.

I tried with

  $ gpg --keyserver-options no-honor-keyserver-url \
        --import-options no-repair-keys            \
        --refresh-keys 0xCCD2ED94D21739E9

but I get the same ultra-lengthy output.

Once again, the --no-verbose option does not seem to help, while the -q
option seems to only suppress the old (useful) output, while retaining
the lengthy signature check output...

Did I misunderstand what you suggested?

Moreover, I have a couple of questions:

 a) If gpg repairs the key, while it refreshes it, why does it need
    to repair it again and again, each time I refresh the same key
    (which is unchanged on the keyserver)?
    Is the key "broken" on the keyserver itself?
 
 b) While gpg is repairing the key, does it really need to be so
    verbose and show one line for each verifiable signature?
    Could gpg repair the key without producing all this output?
    Maybe when the --no-verbose option has been passed?


Please let me know.
Thanks for your time and patience!

-- 
 http://www.inventati.org/frx/
 There's not a second to spare! To the laboratory!
..................................................... Francesco Poli .
 GnuPG key fpr == CA01 1147 9CD2 EFDF FB82  3925 3E1C 27E1 1F69 BFFE
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/attachments/20170905/4eeb367e/attachment.sig>


More information about the pkg-gnupg-maint mailing list