Re: a Question about Key Servers

2011-08-25 Thread Daniel Kahn Gillmor
On 08/24/2011 09:40 PM, David Manouchehri wrote: I personally try to update my keyring every few weeks. This sort of situation is one which a better toolset could automate. If you have suggestions about how/when gpg could automatically refresh keys, you might consider adding them to this

Re: a Question about Key Servers

2011-08-25 Thread Robert J. Hansen
On 8/25/11 8:27 AM, Daniel Kahn Gillmor wrote: This sort of situation is one which a better toolset could automate. It would seem the proper place for this is to leverage existing system automation tools, not inventing something new. proverbs:~ rjh$ crontab -l 30 2 * * * gpg --refresh-keys

Re: a Question about Key Servers

2011-08-25 Thread Daniel Kahn Gillmor
On 08/25/2011 09:00 AM, Robert J. Hansen wrote: On 8/25/11 8:27 AM, Daniel Kahn Gillmor wrote: This sort of situation is one which a better toolset could automate. It would seem the proper place for this is to leverage existing system automation tools, not inventing something new.

Re: a Question about Key Servers

2011-08-25 Thread Robert J. Hansen
On 8/25/11 9:36 AM, Daniel Kahn Gillmor wrote: Yes, i do this myself, but with a large keyring, a full --refresh-keys takes ages and thrashes my machine. Define 'large keyring', please: I mean no offense, but that's a pretty vague word. proverbs:~ rjh$ gpg --list-keys|grep ^pub|wc -l 288

Re: a Question about Key Servers

2011-08-25 Thread Daniel Kahn Gillmor
On 08/25/2011 10:04 AM, Robert J. Hansen wrote: Now, maybe you have thousands of keys on your keyring and it takes a ridiculous amount of time, but I suspect you're a bit of an outlier. Yes, it's true, and yes, i'm an outlier. At the moment. The problem for any system of automated

Re: a Question about Key Servers

2011-08-25 Thread Robert J. Hansen
On 8/25/2011 10:28 AM, Daniel Kahn Gillmor wrote: Except that, quite clearly, most users have no idea it is their problem and the problem remains unsolved. Now that you mention it, I'd like to reject the premise outright: that this is a problem. How do we know it's a problem? I don't doubt

gpg: invalid item `BZIP2' in preference string

2011-08-25 Thread Lance W. Haverkamp
I compiled both the stock 1.4.11 the Ubuntu 1.4.10. Both ways I get the following error: $ gpg --gen-key gpg (GnuPG) 1.4.10; Copyright (C) 2008 Free Software Foundation, Inc. This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by

Re: Signing multiple keys

2011-08-25 Thread Daniel Kahn Gillmor
On 08/25/2011 12:50 PM, Aaron Toponce wrote: According to the gnupg(1) manpage, I see --multifile for encryption, decryption and verification. Is it possible to use this to sign multiple keys simultaneously? I don't have any keys to sign, or I would give this a try (I guess I could manually

Re: gpg: invalid item `BZIP2' in preference string

2011-08-25 Thread Werner Koch
On Thu, 25 Aug 2011 17:22, la...@thehaverkamps.net said: I compiled both the stock 1.4.11 the Ubuntu 1.4.10. Both ways I get gpg: invalid item `BZIP2' in preference string You build gpg without bzip2 support. Install the libbz2-dev before configuring. changing from 4096 to 8192 bit)

Marking a key as don't export?

2011-08-25 Thread Dan McGee
Is there any way to mark a key as local-only, similar to an lsign-created local signature? I'm asking because I plan on generating a master key to be used by a piece of software where ultimate trust can be rooted, and there is really no need to have even the public half of this key ever leave the

Re: Signing multiple keys

2011-08-25 Thread Remco Rijnders
On Thu, Aug 25, 2011 at 12:02:52PM -0600, Aaron wrote in 4e568e4c.8080...@gmail.com: On 08/25/2011 11:56 AM, Jameson Graef Rollins wrote: Do you want to sign every key in your keyring? If so, it's not hard to get gpg to enumerate all of your keys in a machine-parsable format (see --with-colons

Re: Signing multiple keys

2011-08-25 Thread Doug Barton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/25/2011 11:02, Aaron Toponce wrote: On 08/25/2011 11:56 AM, Jameson Graef Rollins wrote: Do you want to sign every key in your keyring? If so, it's not hard to get gpg to enumerate all of your keys in a machine-parsable format (see

Re: Signing multiple keys

2011-08-25 Thread Jameson Graef Rollins
On Thu, 25 Aug 2011 12:02:52 -0600, Aaron Toponce aaron.topo...@gmail.com wrote: If I have a public keyring of all the attendees of the party, then I will want to sign every key in that keyring. This should be very easy to script. See the following options: --keyring FILE --list-public-keys

Re: Signing multiple keys

2011-08-25 Thread Remco Rijnders
On Thu, Aug 25, 2011 at 07:35:09PM +0100, MFPA wrote in 531058786.20110825193509@my_localhost: Hi On Thursday 25 August 2011 at 7:02:52 PM, in mid:4e568e4c.8080...@gmail.com, Aaron Toponce wrote: If I have a public keyring of all the attendees of the party, then I will want to sign every

Re: Signing multiple keys

2011-08-25 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Thursday 25 August 2011 at 7:02:52 PM, in mid:4e568e4c.8080...@gmail.com, Aaron Toponce wrote: If I have a public keyring of all the attendees of the party, then I will want to sign every key in that keyring. You could have a keyring

Re: Signing multiple keys

2011-08-25 Thread Jameson Graef Rollins
On Thu, 25 Aug 2011 11:37:35 -0600, Aaron Toponce aaron.topo...@gmail.com wrote: caff $FPR1 $FPR2 ... Well, if I need to provide each key ID/fingerprint, then I might as well write a simple loop: for KEYID in ID1 ID2 ID3 ...; do gpg --sign $KEYID gpg