Your message dated Mon, 28 Jul 2008 17:45:17 +0200
with message-id <[EMAIL PROTECTED]>
and subject line Re: Bug#258423: gnupg: Keys with expiry date set are imported
"Sign only" with PGP5i
has caused the Debian Bug report #258423,
regarding gnupg: Keys with expiry date set are imported "Sign only" with PGP5i
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)
--
258423: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=258423
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: gnupg
Version: 1.2.4-2
Severity: normal
When generating a key with gpg AND setting its expiry date, it is
marked as "Sign only" when imported to PGP5i.
Below is a transcript. Two keys are generated with GPG, the first
(test1) without expiry date, the second one (test2) with 1-year expiry
date. PGP5i imports the first one fine as "Sign & Encrypt", the
second one is imported as "Sign only" (search for "pgpk -a foo" call)
Another PGP5 implementation (3rd party site, thus no version
information available) seems to agree with these results: it was
unable to encrypt to my GPG-generated key with expiry date set.
Deleting the expiry date after key generation does not change the
results: PGP6i thinks it is a "Sign only" key.
Cheers,
Michael
=============================================================================
PGP5i version: 5.0-8 (Debian)
GPG options:
[201]% grep -v '^#|^[ ]*$' .gnupg/gpg.conf
no-greeting
default-recipient-self
escape-from-lines
lock-once
keyserver x-hkp://wwwkeys.pgp.net
openpgp
load-extension idea
comment ""
secret-keyring secring.pgp
keyring pubring.pgp
=============================================================================
[209]% gpg --gen-key
gpg --gen-key
Please select what kind of key you want:
(1) DSA and ElGamal (default)
(2) DSA (sign only)
(4) RSA (sign only)
Your selection? 1
1
DSA keypair will have 1024 bits.
About to generate a new ELG-E keypair.
minimum keysize is 768 bits
default keysize is 1024 bits
highest suggested keysize is 2048 bits
What keysize do you want? (1024) 2048
2048
Requested keysize is 2048 bits
Please specify how long the key should be valid.
0 = key does not expire
<n> = key expires in n days
<n>w = key expires in n weeks
<n>m = key expires in n months
<n>y = key expires in n years
Key is valid for? (0)
Key does not expire at all
Is this correct (y/n)? y
y
You need a User-ID to identify your key; the software constructs the user id
from Real Name, Comment and Email Address in this form:
"Heinrich Heine (Der Dichter) <[EMAIL PROTECTED]>"
Real name: test1
test1
Email address: test1
test1
Comment:
You selected this USER-ID:
"test1 <test1>"
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? n
n
Real name: test
test
You selected this USER-ID:
"test <test1>"
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? o
o
You need a Passphrase to protect your secret key.
Enter passphrase:
Repeat passphrase:
You don't want a passphrase - this is probably a *bad* idea!
I will do it anyway. You can change your passphrase at any time,
using this program with the option "--edit-key".
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
++++++++++++++++++++.++++++++++++++++++++.++++++++++++++++++++++++++++++.++++++++++++++++++++++++++++++++++++++++.+++++++++++++++++++++++++......................................................+++++
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
++++++++++.+++++++++++++++++++++++++.+++++++++++++++..++++++++++.+++++....++++++++++.++++++++++..++++++++++..++++++++++++++++++++++++++++++.+++++....+++++++++++++++>++++++++++>..+++++............................................................................................................................+++++^^^
public and secret key created and signed.
key marked as ultimately trusted.
pub 1024D/3C536E7E 2004-07-09 test <test1>
Key fingerprint = 622F 1D20 822E 37EF 544B 3DE1 4C1A 38A5 3C53 6E7E
sub 2048g/14AB91EF 2004-07-09
[210]% gpg -a --export 3C536E7E > foo
gpg -a --export 3C536E7E > foo
[211]% pgpk -a foo
pgpk -a foo
Cannot open configuration file /home/michaelw/.pgp/pgp.cfg
Adding keys:
Key ring: 'foo'
Type Bits KeyID Created Expires Algorithm Use
pub 1024 0x3C536E7E 2004-07-09 ---------- DSS Sign & Encrypt
sub 2048 0x14AB91EF 2004-07-09 ---------- Diffie-Hellman
uid test <test1>
1 matching key found
Add these keys to your keyring? [Y/n] n
n
Aborted.
=============================================================================
[212]% gpg --gen-key
gpg --gen-key
Please select what kind of key you want:
(1) DSA and ElGamal (default)
(2) DSA (sign only)
(4) RSA (sign only)
Your selection? 1
1
DSA keypair will have 1024 bits.
About to generate a new ELG-E keypair.
minimum keysize is 768 bits
default keysize is 1024 bits
highest suggested keysize is 2048 bits
What keysize do you want? (1024) 2048
2048
Requested keysize is 2048 bits
Please specify how long the key should be valid.
0 = key does not expire
<n> = key expires in n days
<n>w = key expires in n weeks
<n>m = key expires in n months
<n>y = key expires in n years
Key is valid for? (0) 1y
1y
Key expires at Sat Jul 9 16:56:15 2005 CEST
Is this correct (y/n)? y
y
You need a User-ID to identify your key; the software constructs the user id
from Real Name, Comment and Email Address in this form:
"Heinrich Heine (Der Dichter) <[EMAIL PROTECTED]>"
Real name: test
test
Email address: test2
test2
Comment:
You selected this USER-ID:
"test <test2>"
Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? o
o
You need a Passphrase to protect your secret key.
Enter passphrase:
Repeat passphrase:
You don't want a passphrase - this is probably a *bad* idea!
I will do it anyway. You can change your passphrase at any time,
using this program with the option "--edit-key".
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
+++++++++++++++++++++++++.+++++.+++++++++++++++++++++++++.++++++++++.+++++++++++++++.+++++++++++++++.+++++.++++++++++..++++++++++.++++++++++.+++++.............................>+++++..............<..+++++...................................+++++
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
+++++++++++++++++++++++++.+++++..++++++++++......+++++..+++++.++++++++++..+++++.+++++++++++++++...+++++.+++++++++++++++.++++++++++++++++++++++++++++++.+++++++++++++++>+++++...+++++>.+++++..>..+++++<+++++................+++++^^^
public and secret key created and signed.
key marked as ultimately trusted.
pub 1024D/C2AFBE24 2004-07-09 test <test2>
Key fingerprint = AF72 4F6E 51A0 AF41 5213 1A32 FF97 B5CE C2AF BE24
sub 2048g/37ED0A60 2004-07-09 [expires: 2005-07-09]
[213]% gpg -a --export C2AFBE24 > foo
gpg -a --export C2AFBE24 > foo
[214]% pgpk -a foo
pgpk -a foo
Cannot open configuration file /home/michaelw/.pgp/pgp.cfg
Adding keys:
Key ring: 'foo'
Type Bits KeyID Created Expires Algorithm Use
pub 1024 0xC2AFBE24 2004-07-09 ---------- DSS Sign only
sub 2048 0x37ED0A60 2004-07-09 ---------- Diffie-Hellman
uid test <test2>
1 matching key found
Add these keys to your keyring? [Y/n] n
n
Aborted.
[215]%
-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux roadkill 2.4.26 #1 Fri May 21 19:56:14 CEST 2004 i686
Locale: LANG=POSIX, LC_CTYPE=de_DE.UTF-8
Versions of packages gnupg depends on:
ii libbz2-1.0 1.0.2-1 A high-quality block-sorting file
ii libc6 2.3.2.ds1-10 GNU C Library: Shared libraries an
ii libldap2 2.1.22-1 OpenLDAP libraries
ii makedev 2.3.1-70 Creates device files in /dev
ii zlib1g 1:1.2.1-3 compression library - runtime
-- no debconf information
--- End Message ---
--- Begin Message ---
Hi,
Upstream has made it clear that PHP5 is not feasibly supportable by gnupg. I
therefore think we can close this bug report.
Thijs
pgpJQIF674jWH.pgp
Description: PGP signature
--- End Message ---
