Hello,
I was using GnuPG 1.4.5.

$ gpg --list-sigs
/home/test1/.gnupg/pubring.gpg
---------------------------------
pub   1024D/E913B4F9 2009-12-11
uid                  Test1 (Testing) <[email protected]>
sig 3        E913B4F9 2009-12-11  Test1 (Testing) <[email protected]>
sub   1024g/25D2E967 2009-12-11
sig          E913B4F9 2009-12-11  Test1 (Testing) <[email protected]>

I imported two different key ([email protected] and [email protected]) in two
different keyring (test2 and test3).

$ gpg --keyring test2 --no-default-keyring --import /tmp/test2_pub_key
gpg: keyring `/home/test1/.gnupg/test2' created
gpg: key 2BD18395: public key "Test2 (Testing 2) <[email protected]>" imported
gpg: Total number processed: 1
gpg:               imported: 1

$ gpg --keyring test2 --list-keys
/home/test1/.gnupg/pubring.gpg
---------------------------------
pub   1024D/E913B4F9 2009-12-11
uid                  Test1 (Testing) <[email protected]>
sub   1024g/25D2E967 2009-12-11

/home/test1/.gnupg/test2
---------------------------
pub   1024D/2BD18395 2009-12-11
uid                  Test2 (Testing 2) <[email protected]>
sub   1024g/474B7E93 2009-12-11


$ gpg --keyring test3 --no-default-keyring --import
/tmp/test3_pub_key
gpg: keyring `/home/test1/.gnupg/test3' created
gpg: key 7D6F8608: public key "Test3 (Testing 3) <[email protected]>" imported
gpg: Total number processed: 1
gpg:               imported: 1

$ gpg --keyring test3 --list-keys
/home/test1/.gnupg/pubring.gpg
---------------------------------
pub   1024D/E913B4F9 2009-12-11
uid                  Test1 (Testing) <[email protected]>
sub   1024g/25D2E967 2009-12-11

/home/test1/.gnupg/test3
---------------------------
pub   1024D/7D6F8608 2009-12-11
uid                  Test3 (Testing 3) <[email protected]>
sub   1024g/636851B8 2009-12-11


Now I signed first [email protected] key with my key ([email protected], which is
untimely trusted key) and able encrypt message using keyring test2,
[email protected] key.

$ gpg --keyring test2 --sign-key -u [email protected] [email protected]
-- works fine
$ gpg -se -a --keyring test2 --batch -u [email protected] -r
[email protected]</tmp/abc -- works fine also

The problem happen when I sign [email protected] key in test3 keyring with my
key([email protected]). The signing went fine. Also I able to encrypt message
using keyring test3, [email protected] key. But at this point it broke trust on
keyring test2, [email protected] key. That key becomes unusable.

$ gpg --keyring test3 --sign-key -u [email protected] [email protected]
-- works fine
$ gpg -se -a --keyring test3 --batch -u [email protected] -r
[email protected]</tmp/abc --
works fine

Broken
$ gpg -se -a --keyring test2 --batch -u [email protected] -r
[email protected]</tmp/abc
gpg: 474B7E93: There is no assurance this key belongs to the named user
gpg: [stdin]: sign+encrypt failed: unusable public key

The same command sequence works fine with GnuPG 1.2.1. Both key (
[email protected] and [email protected]) keeps working.
Any help appreciated.

Thanks,
-Ritesh
_______________________________________________
Gnupg-users mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Reply via email to