On Sat, 8 Aug 2020 04:43:50 +0000 Paul Wise <[email protected]> wrote:
On Fri, Aug 7, 2020 at 12:00 PM Steve McIntyre wrote:
> Maybe we could/should link to direct lookups on keyring.d.o if that's
> possible, or use WKD somehow (hand-wave)?
The HKPS URL could be used for this:
https://keyring.debian.org/pks/lookup?op=get&search=0x10460DAD76165AD81FBC0CE9988021A964E6EA7D
https://tools.ietf.org/html/draft-shaw-openpgp-hkp-00#section-3.4
AFAICT the WKD stuff doesn't have lookups based on key fingerprint.
Thanks for the information Paul.
I was looking for the Aron Xu key.
After reading https://keyring.debian.org/ :
" Fetch a key
Once you know the key's ID, just ask the server for it:
$ gpg --keyserver hkps://keyring.debian.org:443 --recv-keys
0x2404C9546E145360
Debian keys may also be retrieved by using the form at db.debian.org or:
finger [email protected]
"
So I did:
$ finger [email protected]
[db.debian.org]
Trying 2a02:16a8:dc41:100::13a...
uid=aron,ou=users,dc=debian,dc=org
First name: Aron
Last name: Xu
Email: Aron Xu <[email protected]>
IRC nickname: happyaron
Fingerprint: 3A9E 7D14 9697 510A 3E37 CD95 C38E 8160 A178 41FE
Key block: finger aron/[email protected]
Then I did:
$ finger aron/[email protected]
[db.debian.org]
Trying 2a02:16a8:dc41:100::13a...
uid=aron,ou=users,dc=debian,dc=org
Key block:
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQINBEyqGUQBEACnzqGcVJiFPMmoMCtLGXD8sNDzMdNujLPhWTueqJMTcHhvW5Ym
oLvnHnPsRC7tTfQaxL9V5L9PeYJLM3QWzCVqEC1uMKwizmqaSRjQUIHOSPj45pV8
[...]
AsLzjLT4A8tyPGn24FFOrP8w1oY7kqr8A1upPnoVs1QVT1p/fHsBI7OaMMM9LEHc
N+KSkXARMQ
Output truncated at 100000 bytes...
The key is too long and can't be fetched using finger :-(
I was able to get the key using the web site:
https://keyring.debian.org/pks/lookup?op=get&search=0xF8643574713C9BAE
The output is 240 kB so much more than the limit (on the server side?) of 100
kB used by finger.
I don't know if Debian should update the documentation on
https://keyring.debian.org/ or remove the limit on finger, or both?
Bye
--
Dr. Ludovic Rousseau
