Re: What is a reliable way to backup/restore my keys and test?

2016-09-19 Thread Werner Koch
On Wed, 14 Sep 2016 17:10, du...@nofroth.com said: > Once I have completed my OS upgrade how do I restore my keys and the > trust levels assigned to them? If you restore the backup of ~/.gnupg (with all sub directories) with the right permissions (tar xpf) you should be done. GnuPGnstores all it

Re: What is a reliable way to backup/restore my keys and test?

2016-09-15 Thread Daniel Kahn Gillmor
On Thu 2016-09-15 15:32:32 -0400, MFPA wrote: > And if they are accidentally sent to a keyserver, does the keyserver > strip them because they are marked as non-exportable? It should but the current sks keyservers do not do this right, and an attempt to fix this has been stalled for years: http

RE: What is a reliable way to backup/restore my keys and test?

2016-09-15 Thread Robert J. Hansen
> Does exporting local signatures make it somehow more likely they might be > accidentally sent to a keyserver? No. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: What is a reliable way to backup/restore my keys and test?

2016-09-15 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Thursday 15 September 2016 at 3:32:22 PM, in , Robert J. Hansen wrote:- > But I agree with Daniel that it's important to include those > options if you have local signatures on your keyring. Does exporting local signatures make it somehow more

RE: What is a reliable way to backup/restore my keys and test?

2016-09-15 Thread Robert J. Hansen
> I am unable to find any references in man to export-local in > - --export-options except for export-local-sigs. Maybe this is an > undocumented parameter to the --export-options option? What is it > supposed to do? --export-local is the same as --export-local-sigs. Likewise with --import-loca

Re: What is a reliable way to backup/restore my keys and test?

2016-09-15 Thread Duane Whitty
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 16-09-14 05:24 PM, Daniel Kahn Gillmor wrote: > Thanks for the very thorough walk-through, Robert. > > Perhaps GnuPG ought to produce some kind of interchangeable backup > automatically on its own that it can re-consume, so this kind of > inv

Re: What is a reliable way to backup/restore my keys and test?

2016-09-15 Thread Duane Whitty
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 16-09-14 04:01 PM, Robert J. Hansen wrote: >> I am relatively new to GNUPG so my apologies in advance if this >> question > is >> trivial. > > Welcome! And your question is not trivial. > > The following is the procedure I use on UNIX systems

Re: What is a reliable way to backup/restore my keys and test?

2016-09-15 Thread murphy
Also how to handle the tofu.db? A quick check doesn't find any --import-tofu or --export-tofu options. Does a simple backup and transfer of tofu.db suffice? --Murphy signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list G

Re: What is a reliable way to backup/restore my keys and test?

2016-09-14 Thread Piotr Chmielnicki
On 09/14/2016 06:31 PM, Thomas Glanzmann wrote: > Hello Duane, > >> How can I make sure my private key and trust assignments were copied >> properly? > for me in the past taking a backup of .gnupg was sufficient. However you > can also export your secret key using: > > gpg --export-secret-keys -a

RE: What is a reliable way to backup/restore my keys and test?

2016-09-14 Thread Daniel Kahn Gillmor
Thanks for the very thorough walk-through, Robert. Perhaps GnuPG ought to produce some kind of interchangeable backup automatically on its own that it can re-consume, so this kind of involved process isn't necessary. A couple notes below: On Wed 2016-09-14 15:01:47 -0400, Robert J. Hansen wrote:

RE: What is a reliable way to backup/restore my keys and test?

2016-09-14 Thread Robert J. Hansen
> I am relatively new to GNUPG so my apologies in advance if this question is > trivial. Welcome! And your question is not trivial. The following is the procedure I use on UNIX systems: First, export all public certificates into a public keyring: $ gpg --armor --export > pub.asc Secon

Re: What is a reliable way to backup/restore my keys and test?

2016-09-14 Thread Thomas Glanzmann
Hello Duane, > How can I make sure my private key and trust assignments were copied > properly? for me in the past taking a backup of .gnupg was sufficient. However you can also export your secret key using: gpg --export-secret-keys -a > secret.asc And the manual trust assignments by doing: g