regular update of all keys from a keyserver

Hi, I am aware that one can update all the keys in local-keyring from a keyserver using "gpg --refresh-keys". Are there any disadvantages to simply put this command into user crontab and execute for example once a day? thanks, Martin ___ Gnupg-users m

Re: regular update of all keys from a keyserver

Thank you for all the replies! Martin On Mon, Oct 17, 2016 at 7:52 PM, Brian Minton wrote: > > > On 10/17/2016 11:41 AM, Daniel Kahn Gillmor wrote: >> On Mon 2016-10-17 06:31:16 -0400, Martin T wrote: >> >>> I am aware that one can update all the keys in loca

list revoked UIDs

Hi, I imported a public key from keyserver which has multiple UIDs and one of those UIDs is revoked. When I execute "gpg --list-keys " then I see only active UIDs and not that one revoked UID. Is there a way to list that revoked UID? Or wasn't that imported in the first place? thanks, Martin __

Re: list revoked UIDs

Thanks! This did the trick. Martin On Tue, Oct 18, 2016 at 2:29 PM, Peter Lebbing wrote: > On 18/10/16 12:42, Martin T wrote: >> Is there a >> way to list that revoked UID? > > I think it's: > > gpg --list-options show-unusable-uids --list-keys <...> &

ways to ensure that GPG public key belongs to right person in business to business communication

Hi, let's say that Alice from company A and Bob from company B need to exchange some private data with each other. Alice and Bob need to encrypt data just that one time, they do not belong to web-of-trust, but both company A and company B websites are trusted by certification authority, secure and

Re: ways to ensure that GPG public key belongs to right person in business to business communication

and asks Bob to confirm that it matches. I guess this provides reasonable security? thanks, Martin On Wed, Oct 26, 2016 at 11:51 PM, Daniel Kahn Gillmor wrote: > Hi Martin-- > > On Wed 2016-10-26 16:21:48 -0400, Martin T wrote: > >> let's say that Alice from company A

How to detect fingerprint and type of the key from pubring.gpg(public keyring file)?

Hi, RIPE(RIR in European region) database allows one to upload ASCII armored PGP public keys: http://www.ripe.net/data-tools/support/security/pgp Server-side software is able to generate some "key-cert" object attributes automatically. For example "method", "owner" and "fingerpr": noc@T42 ~ $ who

Re: How to detect fingerprint and type of the key from pubring.gpg(public keyring file)?

vate key fingerprints remained the same. So the key fingerprint is a hashed key material? Is it a SHA-1, MD5 or some other type of hash? regards, Martin 2013/8/2, David Shaw : > On Aug 1, 2013, at 6:58 PM, Martin T wrote: > >> Hi, >> >> RIPE(RIR in European region) datab

best practice for handing over the private key

Hi, I need to create a public and private key pair for a person representing an organization, upload the public key to RIPE(regional Internet registry in Europe) public server, create some database entries using those public and private keys and finally hand over the private key + password protect

Re: best practice for handing over the private key

hen has to send the private key and password protecting the private key to me. regards, Martin 2013/8/2, NdK : > Il 02/08/2013 12:51, Martin T ha scritto: > > [...] >> shipping the USB memory stick. Better ideas? > It's a wrong thing from the start. > Let the user generate

Re: best practice for handing over the private key

3/8/2, John Clizbe : > Martin T wrote: >> Hi, >> >> I need to create a public and private key pair for a person >> representing an organization, upload the public key to RIPE(regional >> Internet registry in Europe) public server, create some database >> entri

Re: How to detect fingerprint and type of the key from pubring.gpg(public keyring file)?

00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 || noc@T42 ~/.gnupg $ regards, Martin On 8/2/13, David Shaw wrote: > On Aug 2, 2013, at 3:56 AM, Martin T wrote: > >> Hi, >> >> thanks for the reply! >> >>>> I think "method"

understanding GnuPG "--clearsign" option

Hi, one can sign the message with "--clearsign" option which adds ASCII armored(Radix-64 encoding) "PGP signature" at the end of the text. This "PGP signature" contains the UID of the signer, timestamp and key ID. However, two questions: 1) Where is the UID of the signer, timestamp of the signatu

Re: gpg not able to find my secret key

On Thu, Aug 23, 2018 at 12:54 PM Martin T wrote: > > Hi! > > I reinstalled my workstation and moved ~/.gnupg directory from old > machine to new one. Gpg version in both workstations is 2.1.18. The > problem is, that in the new workstation, when I try to decrypt a file, >

gpg not able to find my secret key

Hi! I reinstalled my workstation and moved ~/.gnupg directory from old machine to new one. Gpg version in both workstations is 2.1.18. The problem is, that in the new workstation, when I try to decrypt a file, it doesn't find the secret key: $ gpg -o .file -d .file.gpg gpg: encrypted with RSA key

Re: gpg not able to find my secret key

Hi! Thanks for replies! The problem was indeed the existing ~/.gnupg/.gpg-v21-migrated file. Once I removed it, I did see the keys in the output of "gpg --list-keys" and "gpg --list-secret-keys". One more small question- in the output of "gpg --list-keys" or "gpg --list-secret-keys" I see two key

Re: gpg not able to find my secret key

On Fri, Aug 24, 2018 at 2:38 PM Damien Goutte-Gattat wrote: > > On 08/24/2018 07:47 AM, Martin T wrote: > > One more small question- in the output of "gpg --list-keys" or "gpg > > --list-secret-keys" I see two keys, but in the output of > > &quo