[pkg-gnupg-maint] Bug#1009311: dirmngr: should no longer use keys.openpgp.org by default

[Vincent Lefevre]

Package: dirmngr
Version: 2.2.27-3+b1
Severity: normal

The default https://keys.openpgp.org:443 key server is no longer working:

$ gpg -v --recv-keys 7CA7ECAAF06216B90F894146ACF8146CAE8CBBC4
gpg: data source: https://keys.openpgp.org:443
gpg: pub  rsa2048/ACF8146CAE8CBBC4 2019-01-02  
gpg: key ACF8146CAE8CBBC4: new key but contains no user ID - skipped
gpg: Total number processed: 1
gpg:           w/o user IDs: 1

https://superuser.com/questions/1485213/gpg-cant-import-key-new-key-but-contains-no-user-id-skipped
says: "You are probably using the keys.openpgp.org keyserver, which
has an owner approval system – it will strip all user IDs unless
the owner of the corresponding email address has allowed them to be
published. Try to download the key from elsewhere [...]"

The consequence is that when I want to check a signature made with
this key, I get:

gpg: Signature made 2022-04-09T21:49:20 CEST
gpg:                using RSA key 7CA7ECAAF06216B90F894146ACF8146CAE8CBBC4
gpg: Can't check signature: No public key

-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-updates'), (500, 'stable-security'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.16.0-6-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=POSIX, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages dirmngr depends on:
ii  adduser              3.121
ii  gpgconf              2.2.27-3+b1
ii  init-system-helpers  1.62
ii  libassuan0           2.5.5-1
ii  libc6                2.33-7
ii  libgcrypt20          1.10.1-2
ii  libgnutls30          3.7.3-4+b1
ii  libgpg-error0        1.43-3
ii  libksba8             1.6.0-2
ii  libldap-2.5-0        2.5.11+dfsg-1
ii  libnpth0             1.6-3
ii  lsb-base             11.1.0

Versions of packages dirmngr recommends:
ii  gnupg  2.2.27-3

Versions of packages dirmngr suggests:
ii  dbus-user-session  1.14.0-1
ii  libpam-systemd     250.4-1
pn  pinentry-gnome3    <none>
pn  tor                <none>

-- no debconf information

-- 
Vincent Lefèvre <vincent at vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)