Package: monkeysphere
Version: 0.40-2
Severity: important
Control: affects -1 gnupg
Control: tags -1 upstream
Modern versions of GnuPG print out the fingerprints of all subkeys in
addition to the primary key, especially when doing --list-colons.
This causes m-a c+ to fail due to a perceived ambiguity:
0 root@tester:~# monkeysphere-authentication c+
0EE5BE979282D80B9F7540F1CCD2ED94D21739E9
More than one fingerprint found:
0EE5BE979282D80B9F7540F1CCD2ED94D21739E9
C7898678D456E06B968D50D3125868EA4BFA08E4
6639DB0BBB61AB268BF7D5F9DC104C4E0CA757FB
D568EF3E553B8E24FB07A561C61BD3EC21484CFF
EB9691287A7ADDE3757D911EA52401B11BFDFA5C
139C1D8C5E58B42FFE7FA04C3714729214D5DA70
EDB2E74F56FCF2B67297B73524ECFF5AFF68370A
B29F4E9BEE4BFC4C75A2936EA70A96E1439EA852
Please use a more specific key ID.
255 root@tester:~#
This should be fixed by doing better filtering in the fingerprint
selection step, probably by limiting the selection to the first fpr:
record after a pub: record.
--dkg
-- System Information:
Debian Release: stretch/sid
APT prefers testing-debug
APT policy: (500, 'testing-debug'), (500, 'testing'), (200,
'unstable-debug'), (200, 'unstable'), (1, 'experimental-debug'), (1,
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.8.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages monkeysphere depends on:
ii adduser 3.115
ii gnupg 2.1.16-2
ii libcrypt-openssl-rsa-perl 0.28-3+b1
ii libperl5.24 [libdigest-sha-perl] 5.24.1~rc3-3
ii lockfile-progs 0.1.17
Versions of packages monkeysphere recommends:
ii agent-transfer 0.40-2
ii cron 3.0pl1-128
ii netcat-openbsd [netcat] 1.105-7
ii netcat-traditional [netcat] 1.10-41
ii openssh-client 1:7.3p1-3+b1
ii socat 1.7.3.1-2
ii ssh-askpass 1:1.2.4.1-9
Versions of packages monkeysphere suggests:
ii msva-perl [monkeysphere-validation-agent] 0.9.2-1
-- Configuration Files:
/etc/monkeysphere/monkeysphere-authentication.conf changed [not included]
-- no debconf information
