Am 27 May 2006 um 19:55 hat Jørgen Lysdal geschrieben:

> I have a revoker on my key that i would like to remove, but i cant
> find a way to do this. Can anyone help?

If you sent your key to a keyserver, then you are out of luck. There
is no way to take something back you sent to a keyserver. You can
only revoke things, but to add a revoker is unrevocable itself for
security reasons. The only possibility for you is to revoke the key
by yourself, but that is also the only damage a bad revoker can do to
your key, so ...

As the addition of a revoker to a key is the addition of a signature,
there is a non-trivial way to get rid of it, when and only when you
kept the key for yourself. If this is the case, ask again and I will
send you instructions.

> another question.
> When i sign a key, is there any way i can set an expiration time for
> the signature?

>From the man page (= manual):

--ask-sig-expire
 --no-ask-sig-expire
        When  making a data signature, prompt for an expiration time.
        If this option is not specified, the expiration time set  via
        --default-sig-expire  is  used.  --no-ask-sig-expire disables
        this option.  Note that by default,  --force-v3-sigs  is  set
        which also disables this option.  If you want signature expi-
        ration, you must set --no-force-v3-sigs as  well  as  turning
        --ask-sig-expire on.

 --default-sig-expire
        The  default expiration time to use for signature expiration.
        Valid values are "0" for no expiration, a number followed  by
        the  letter d (for days), w (for weeks), m (for months), or y
        (for years) (for example "2m" for two  months,  or  "5y"  for
        five  years),  or  an  absolute  date in the form YYYY-MM-DD.
        Defaults to "0".


> When i use the --list-sig command, is there any way i can see the
> expiration date for signatures?

>From the man page (= manual):

 --list-options parameters
        This  is a space or comma delimited string that gives options
        used when listing keys and signatures (that is,  --list-keys,
        --list-sigs,  --list-public-keys, --list-secret-keys, and the
        --edit-key functions).  Options can be prepended with a `no-'
        to give the opposite meaning.  The options are:

        (...)

        show-sig-expire
               Show  signature  expiration  dates  (if any) during
               --list-sigs or --check-sigs listings.  Defaults to no.


The options I cited from the man page can be used on the commandline
every time you need them or you can put them in the configuration
file for gpg (gpg.conf) so that they are invoked every time you use
gpg.

Dirk

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to