[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Getting new keys (was Re: signing gpg key with old key ...)



on Sat, Nov 11, 2000 at 05:17:43PM -0500, Mike (reznaeous@earthlink.net) wrote:
> kmself@ix.netcom.com wrote:
> > Question for the gallery:  Is there a good method for checking a local
> > keyring against a public keyserver to find updates and/or additional
> > signatures.  The best I can do right now is list the key IDs I've got
> > and do a 'gpg --recv-keys' to update this list.
> 
> From my ~/.gnupg/options:
> 
> # GnuPG can import a key from a HKP keyerver if one is missing

<..>

> keyserver wwwkeys.eu.pgp.net
> 
> That lets my system query a keyserver anytime a new key comes along,
> whether it be a signed email or whatever.  This is how I've gotten all
> but a very few of the keys used on this list, including yours if I
> remember correctly.

This isn't the problem.  I've got the same configuration in my
.gnupg/options file.

I've got 400+ keys.  What I'd like to do is update any signatures,
revocations, or expiry date changes for these keys.  The gpg --recv-keys
command I'm running right now (see prior post) is the only way I can
think of to update this key data.  It appears to be working, but it's
not the cleanest process.

There are two general problems with a public key infrastructure:

  - Key distribution (the 'keyserver' line handles this).
  - Key modification updates.  

The second is the problem I'm tryin to resolve.

-- 
Karsten M. Self <kmself@ix.netcom.com>     http://www.netcom.com/~kmself
 Evangelist, Zelerate, Inc.                      http://www.zelerate.org
  What part of "Gestalt" don't you understand?      There is no K5 cabal
   http://gestalt-system.sourceforge.net/        http://www.kuro5hin.org

Attachment: pgpaJ5oDygdvU.pgp
Description: PGP signature


Reply to: