Re: keyserver has problem???
On Tue, Apr 03, 2001 at 09:12:00PM -0700, Osamu Aoki wrote: If I empty my pubring.gpg to empty file, gpg ask keyserver and can not get signiture checked. I checked with keyserver search.keyserver.net keyserver wwwkeys.us.pgp.net keyserver pgp.ai.mit.edu None works. It is not just my address but all others too. Of course I can check signiture is I put my old pubring.gpg back in the place so system is functional. Anyone has idea??? I did check with keyserver.net web page and I can see my sig there. Some DoS attack??? on key server??? Following is example of key checking result. keyserver.net has issues, i use pgp.ai.mit.edu personally, keyserver.net uses a new proprietary keyserver software. -- Ethan Benson http://www.alaska.net/~erbenson/ pgpEZ6HDnPUDC.pgp Description: PGP signature
Re: keyserver has problem???
Following is with pgp.ai.mit.edu (My current setting) for Ethan's sig. I do have problem even with this. [-- PGP output follows (current time: Wed Apr 4 10:35:23 2001) --] gpg: Signature made Tue Apr 3 23:15:10 2001 PDT using DSA key ID 2C447AFC gpg: requesting key 2C447AFC from pgp.ai.mit.edu ... gpg: can't get key from keyserver: Connection refused gpg: Can't check signature: public key not found [-- End of PGP output --] I used to connect it OK and I have old pubring.gpg which confirmes your sig without problem. But when I use empty pubring.gpg to get them anew I encounter problem. I turned down firewall script down but still persist. Any requirement to connect to this server??? Osamu On Tue, Apr 03, 2001 at 09:12:00PM -0700, Osamu Aoki wrote: If I empty my pubring.gpg to empty file, gpg ask keyserver and can not get signiture checked. I checked with keyserver search.keyserver.net keyserver wwwkeys.us.pgp.net keyserver pgp.ai.mit.edu ... keyserver.net has issues, i use pgp.ai.mit.edu personally, keyserver.net uses a new proprietary keyserver software. -- Ethan Benson http://www.alaska.net/~erbenson/ -- ~\^o^/~~~ ~\^.^/~~~ ~\^*^/~~~ ~\^_^/~~~ ~\^+^/~~~ ~\^:^/~~~ ~\^v^/~~~ + Osamu Aoki [EMAIL PROTECTED], GnuPG-key: 1024D/D5DE453D + + For more debian survival information, peek into: + + http://www.aokiconsulting.com/debian-survival/ +
Re: keyserver has problem???
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Mittwoch, 4. April 2001 19:45 schrieb Osamu Aoki: [-- PGP output follows (current time: Wed Apr 4 10:35:23 2001) --] gpg: Signature made Tue Apr 3 23:15:10 2001 PDT using DSA key ID 2C447AFC gpg: requesting key 2C447AFC from pgp.ai.mit.edu ... gpg: can't get key from keyserver: Connection refused gpg: Can't check signature: public key not found [-- End of PGP output --] But when I use empty pubring.gpg to get them anew I encounter problem. I had this problem today too. I killed my pubring-file because it was too big. And gpg wont import any public key from server. The solution was easy for me: I had a file joerg.asc with my public-key. I imported it with gpg --import joerg.asc Since then gpg could get keys from server again. - -- bye Joerg GPG-Keyid: 0x1120D31B Fingerprint: A3D2 83A4 535D A826 F2AA 4348 8BDD 849C 1120 D31B -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.4 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE6y2pyi92EnBEg0xsRAhsQAKCAFk/dNNwA3UkwiBhDND1biN7STQCeLZKH Fst16RgnDh6AwunTdeXHv9Y= =4att -END PGP SIGNATURE-
Re: keyserver has problem???
I do not think you imported just your own public-key but all your previously obtained public-key, did you?? I tried the same thing. Now I can verify my signature but not others as I expected. I also tried to get my public key sent again to keyserver with $ gpg --keyserver pgp.ai.mit.edu --send-keys Osamu And connection refused. There is something going on. Since pgp key is almost permanently cached at user machine forever, these kind of connection problem is slowly felt... Osamu On Wed, Apr 04, 2001 at 08:39:42PM +0200, Joerg Jaspert wrote: Am Mittwoch, 4. April 2001 19:45 schrieb Osamu Aoki: [-- PGP output follows (current time: Wed Apr 4 10:35:23 2001) --] gpg: Signature made Tue Apr 3 23:15:10 2001 PDT using DSA key ID 2C447AFC gpg: requesting key 2C447AFC from pgp.ai.mit.edu ... gpg: can't get key from keyserver: Connection refused gpg: Can't check signature: public key not found [-- End of PGP output --] But when I use empty pubring.gpg to get them anew I encounter problem. I had this problem today too. I killed my pubring-file because it was too big. And gpg wont import any public key from server. The solution was easy for me: I had a file joerg.asc with my public-key. I imported it with gpg --import joerg.asc Since then gpg could get keys from server again. -- bye Joerg GPG-Keyid: 0x1120D31B Fingerprint: A3D2 83A4 535D A826 F2AA 4348 8BDD 849C 1120 D31B -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] -- ~\^o^/~~~ ~\^.^/~~~ ~\^*^/~~~ ~\^_^/~~~ ~\^+^/~~~ ~\^:^/~~~ ~\^v^/~~~ + Osamu Aoki [EMAIL PROTECTED], GnuPG-key: 1024D/D5DE453D + + For more debian survival information, peek into: + + http://www.aokiconsulting.com/debian-survival/ +
Re: keyserver has problem???
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Mittwoch, 4. April 2001 23:12 schrieb Osamu Aoki: I do not think you imported just your own public-key but all your previously obtained public-key, did you?? NO. I exported my public-key just after i created it. And I only imported this key, nothing else. My pubring.gpg is noe 17306bytes, before that it was 580k ! I tried the same thing. Now I can verify my signature but not others as I expected. keyserver wwwkeys.eu.pgp.net honor-http-proxy Thats the keyserver im using. And gpg has imported 3 new keys since i zapped the pubring. For me it works :) PS: DONT do full qoutes, only the necessary things please. :) - -- bye Joerg GPG-Keyid: 0x1120D31B Fingerprint: A3D2 83A4 535D A826 F2AA 4348 8BDD 849C 1120 D31B -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.4 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE6y4wPi92EnBEg0xsRAopJAJ9t7wa0eCHv7VAExMtcARhIbecicgCaA7wo MM/yptlwEc5w4gaLa2hTP/8= =ruCv -END PGP SIGNATURE-
Re: keyserver has problem???
Joerg Jaspert [EMAIL PROTECTED] writes: My pubring.gpg is noe 17306bytes, before that it was 580k ! Why do you care how big it is? Mine is 5.3MB, and it's fine. -- Alan Shutko [EMAIL PROTECTED] - In a variety of flavors! There's only one everything.
Re: keyserver has problem???
Wow, YES I can get new key from europe. Thanks telling me one working keyserver. keyserver wwwkeys.eu.pgp.net I have problem with pgp.ai... still. Strange since I am in USA (California). Maybe another local IP routing issue of my ISP? Maybe overloaded keyserver in USA? I will stay with this keyserver for a while. Osamu -- ~\^o^/~~~ ~\^.^/~~~ ~\^*^/~~~ ~\^_^/~~~ ~\^+^/~~~ ~\^:^/~~~ ~\^v^/~~~ + Osamu Aoki [EMAIL PROTECTED], GnuPG-key: 1024D/D5DE453D + + For more debian survival information, peek into: + + http://www.aokiconsulting.com/debian-survival/ +
Re: keyserver has problem???
On Wed, Apr 04, 2001 at 02:58:24PM -0700, Osamu Aoki wrote: Wow, YES I can get new key from europe. Thanks telling me one working keyserver. keyserver wwwkeys.eu.pgp.net I have problem with pgp.ai... still. Strange since I am in USA (California). Maybe another local IP routing issue of my ISP? Maybe overloaded keyserver in USA? i got a connection refused from pgp.ai.mit.edu last night, its probably just down at the moment unless i missed an announcment of a shutdown which i doubt. I will stay with this keyserver for a while. use one that works, i have found keyserver.net seems to have serious issues with gpg keys, they never seem to show up there. but as i said its not the same keyserver software as used by every other keyserver. -- Ethan Benson http://www.alaska.net/~erbenson/ pgp24HUmpv34r.pgp Description: PGP signature
Re: keyserver has problem???
I think problem is overloaded server or DoS. Look below. On Wed, Apr 04, 2001 at 02:04:33PM -0800, Ethan Benson wrote: i got a connection refused from pgp.ai.mit.edu last night, its ... I did run nslookup and found this is problem with nework near pgp.ai.mit.edu. ...(First try to pgp.ai.mit.edu) 17 pgp5.ai.mit.edu (18.43.0.48) 111.162 ms * 105.970 ms ...(Second try to wwwkeys.us.pgp.net, same thing anyway.) 16 anacreon.lcs.mit.edu (18.24.10.1) 131.536 ms 123.550 ms * 17 pgp5.ai.mit.edu (18.43.0.48) 122.703 ms * * ...(Try again) 14 B24-RTR-FDDI.MIT.EDU (18.168.0.14) 95.158 ms * 109.317 ms 15 RADOLE.LCS.MIT.EDU (18.201.1.3) 100.379 ms 88.364 ms 91.965 ms 16 anacreon.lcs.mit.edu (18.24.10.1) 123.954 ms 94.851 ms 109.271 ms 17 pgp5.ai.mit.edu (18.43.0.48) 160.400 ms * 189.405 ms So packet loss within MIT. Also, wwwkeys.eu.pgp.net has some issue: 18 AR1.Tilburg.surf.net (145.41.7.226) 165.861 ms 163.387 ms 163.316ms 19 AR1.Tilburg.surf.net (145.41.7.226) 162.470 ms !A * 161.607 ms !A To me, this is satrange. (some packet loss?) Always lost at keyserver.??/ -- ~\^o^/~~~ ~\^.^/~~~ ~\^*^/~~~ ~\^_^/~~~ ~\^+^/~~~ ~\^:^/~~~ ~\^v^/~~~ + Osamu Aoki [EMAIL PROTECTED], GnuPG-key: 1024D/D5DE453D + + For more debian survival information, peek into: + + http://www.aokiconsulting.com/debian-survival/ +
keyserver has problem???
If I empty my pubring.gpg to empty file, gpg ask keyserver and can not get signiture checked. I checked with keyserver search.keyserver.net keyserver wwwkeys.us.pgp.net keyserver pgp.ai.mit.edu None works. It is not just my address but all others too. Of course I can check signiture is I put my old pubring.gpg back in the place so system is functional. Anyone has idea??? I did check with keyserver.net web page and I can see my sig there. Some DoS attack??? on key server??? Following is example of key checking result. [-- PGP output follows (current time: Tue Apr 3 21:06:18 2001) --] gpg: Signature made Mon Apr 2 19:57:40 2001 PDT using DSA key ID D5DE453D gpg: requesting key D5DE453D from search.keyserver.net ... gpg: [fd 11]: read error: Connection reset by peer gpg: Total number processed: 0 gpg: no valid OpenPGP data found. gpg: Can't check signature: public key not found [-- End of PGP output --] -- ~\^o^/~~~ ~\^.^/~~~ ~\^*^/~~~ ~\^_^/~~~ ~\^+^/~~~ ~\^:^/~~~ ~\^v^/~~~ + Osamu Aoki [EMAIL PROTECTED], GnuPG-key: 1024D/D5DE453D + + For more debian survival information, peek into: + + http://www.aokiconsulting.com/debian-survival/ + pgpiTgRGjeWxc.pgp Description: PGP signature