On 26.12.2018 10:39, Stefan Claas wrote: > Hi all, > > hope you all had a nice Christmas! > > I have set up WKD on my VPS, in order to learn more about it and get now > the following error: > > gpg --encrypt -r s...@300baud.de OpenSSL.txt > gpg: error retrieving 's...@300baud.de' via WKD: Not trusted > gpg: s...@300baud.de: skipped: Not trusted > gpg: OpenSSL.txt: encryption failed: Not trusted > > I assume that dirmngr is downloading my cert and thinks it > is not trusted. However, my site uses a popular Comodo cert. > > Any ideas what is going on here and how to fix this?
It works "on my end" too (GnuPG 2.2.12 on Linux). Did you try fetching some "well-known" WKD people? E.g.: $ gpg --auto-key-locate clear,wkd,nodefault --locate-key w...@gnupg.org My first guess would also be a bad certificate bundle but when I try using "bad" domains from this list https://badssl.com the error is: gpg: error retrieving 't...@expired.badssl.com' via WKD: General error gpg: error reading key: General error Rather than "not trusted" (maybe you could try experimenting with these domains to see if the error is different). There is also "--debug lookup" flag, and "-vvv": $ gpg -vvv --debug lookup --auto-key-locate clear,wkd,nodefault --locate-key EMAIL Maybe that'd print something useful? Do you have anything "exotic" in .gnupg/gpg.conf? Kind regards, Wiktor -- https://metacode.biz/@wiktor _______________________________________________ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users