On Tue, 24 Jan 2017 11:53:55 +0100
Justus Winter <jus...@g10code.com> wrote:

> Can you please describe in detail what you were doing so that we can
> recreate the problem?  You can create a throwaway environment for
> experimentation by setting the environment variable GNUPGHOME to a
> temporary directory, like so (assuming a Bourne-like shell):

This was easier to reproduce than I expected. I've attached the
transcript of a shell session demonstrating the problem. Manually
calling "gpg --tofu-policy good $KEYID" fixes the issue.

I'm using gpg 2.1.17; I haven't checked yesterday's release yet.

HTH,
Luis
$ ls $GNUPGHOME
gpg.conf

$ cat $GNUPGHOME/gpg.conf
trust-model tofu+pgp

$ cat key
%no-protection
%transient-key
Key-Type: RSA
Key-Length: 1024
Name-Real: foo bar
Name-Email: foo...@example.org

$ gpg --batch --gen-key < key
gpg: key 6FA38940B689B96C marked as ultimately trusted
gpg: directory '/home/aranea/.tmp-gnupg/openpgp-revocs.d' created
gpg: revocation certificate stored as 
'/home/aranea/.tmp-gnupg/openpgp-revocs.d/CFAE0B4B50808667BABDBF966FA38940B689B96C.rev'

$ touch foo

$ gpg --sign foo

$ gpg --verify foo.gpg
gpg: Signature made Tue Jan 24 12:22:04 2017 CET
gpg:                using RSA key CFAE0B4B50808667BABDBF966FA38940B689B96C
gpg: checking the trustdb
gpg: marginals needed: 3  completes needed: 1  trust model: tofu+pgp
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: Good signature from "foo bar <foo...@example.org>" [ultimate]
gpg: error updating TOFU database: NOT NULL constraint failed: 
signatures.binding
gpg: TOFU: error registering signature: General error

Attachment: pgpnJanCqEW_z.pgp
Description: OpenPGP digital signature

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to