[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Check your signing key expiration dates!



* On 2019 09 Jul 02:32 -0500, Teemu Likonen wrote:
> Nate Bargmann [2019-07-08T21:14:42-05] wrote:
> 
> > I may just be pedant here, but I found the current manual page for gpg
> > in Buster shows that 'import-clean' is a value for the
> > 'import-options' key. I had it paired with the 'keyserver-options' and
> > it seemed to work there too.
> 
> Options for "import-options" are for "--import" command and
> "export-options" are for "--export" command. Both of them can used with
> "keyserver-options" which are options for "--receive-key", "--send-key"
> and "--refresh-key" commands.

I don't doubt what you say is true, however, others like me will expect
the documentation to agree with the program's behavior.  Both the manual
page and the info document only place 'import-clean' under
'import-options' with no mention of its placement in
'keyserver-options', which led me to consider that its use under
'keyserver-options' is being deprecated.

I hate to say it, but given how important GnuPG has become in our world,
it has to be one of the worst examples of GNU software as it has about
the worst case of user discovery I've dealt with.  And, no, I don't know
how to make it better.  Much of what is found on the Web pertains to the
1.4.x versions and some major changes have taken place since
2.1.something and appear to be ongoing.

I tried to use Seahorse to add a stronger signing subkey and it failed.
So I was back to doing Web searches as the gpg manual is pretty much
useless for figuring out how to do something simple like that.  The GPG
Handbook found online is copyright 20 years ago and various options and
output are no longer valid with the latest gpg.  It's a mess, yet we're
relying on it as best as we can.

- Nate

-- 

"The optimist proclaims that we live in the best of all
possible worlds.  The pessimist fears this is true."

Web: https://www.n0nb.us
Projects: https://github.com/N0NB
GPG fingerprint: 82D6 4F6B 0E67 CD41 F689 BBA6 FB2C 5130 D55A 8819

Attachment: signature.asc
Description: PGP signature


Reply to: