Gentoo Archives: gentoo-dev

From: Joseph Carter <knghtbrd@×××.org>
To: gentoo-dev@g.o
Subject: [gentoo-dev] From GWN: GnuPG keyservers
Date: Wed, 22 Jan 2003 08:10:05
Message-Id: 20030122080700.GA11105@bluecherry.net
1 Please note that wwwkeys.pgp.net has the HKP protocol bug. That is to say
2 that the keyserver will irrevocably hose certain GnuPG keys, those having
3 multiple subkeys.
4
5 There is no fix. There is no way to make a corrupted key work again.
6 GnuPG versions greater than 1.0.6 will attempt to make the corrupted keys
7 usable again, but it can only go so far.
8
9
10 The ONLY fix for this problem seems to be use of a non-broken key server
11 protocol. GnuPG supports one, LDAP, but this support is currently
12 optional and not enabled by default, so most people can't use it. To fix
13 this, re-merge app-crypt/gnupg with ldap in your USE flags.
14
15 Highly recommend that LDAP become non-optional for GnuPG since bascially
16 ALL HKP servers corrupt valid keys, the email servers don't support
17 OpenPGP, and the LDAP servers happen to actually work right, amazingly
18 enough.
19
20 The most common LDAP server, at the moment, is ldap://keyserver.pgp.com.
21
22 --
23 Joseph Carter <knghtbrd@×××.org> Random sig du jour
24
25 <Mercury> LordHavoc: I'm already insane.
26 <Coderjoe> damn straight. or curvy, crooked, or what have you

Replies

Subject Author
Re: [gentoo-dev] From GWN: GnuPG keyservers J Robert Ray <jrray@g.o>