I apologize for not singing any keys yet. Turns out I do not have the part
of the key that can sign:

$ gpg -K
/home/joe/.gnupg/secring.gpg
----------------------------
sec#  4096R/2190E068 2014-01-28
uid                  Joseph T Apuzzo (2-Work) <[email protected]>
uid                  Joseph T Apuzzo (1-Primary) <[email protected]>
uid                  Joseph T Apuzzo (3-Alternative) <[email protected]>
ssb   4096R/AA0AE7E5 2014-01-28
ssb   4096R/FCB05E48 2014-01-28

Note that "sec#" means that you can sign files and encrypt but not sign
keys with that key.
This was by design as I followed
https://alexcabal.com/creating-the-perfect-gpg-keypair/
Since these keys are on a laptop

$ gpg --sign-key --ask-cert-level [email protected]

pub  4096R/816F0300  created: 2014-03-04  expires: never       usage: SC
                     trust: unknown       validity: unknown
sub  4096R/4E452801  created: 2014-03-04  expires: never       usage: E
[ unknown] (1). Michael Kershaw (Dragorn) <[email protected]>


pub  4096R/816F0300  created: 2014-03-04  expires: never       usage: SC
                     trust: unknown       validity: unknown
 Primary key fingerprint: 6731 7A3F  0058 51ED 6B00  5238 0AFF EC2F 816F
0300

     Michael Kershaw (Dragorn) <[email protected]>

How carefully have you verified the key you are about to sign actually
belongs
to the person named above?  If you don't know what to answer, enter "0".

   (0) I will not answer. (default)
   (1) I have not checked at all.
   (2) I have done casual checking.
   (3) I have done very careful checking.

Your selection? (enter `?' for more information): 3
Are you sure that you want to sign this key with your
key "Joseph T Apuzzo (1-Primary) <[email protected]>" (2190E068)

I have checked this key very carefully.

Really sign? (y/N) y
gpg: secret key parts are not available
gpg: signing failed: general error

Key not changed so no update needed.
joe@Mint-VirtualBox ~ $

So the problem I have is that the original keys and revocation certificate
are on a flash drive.
Which actually died, I can not access it.

Anyone have any ideas on how I could correct this? Some way to sign a new
key and revoke the broken one?

-- 
Joe

/**
 ** Joseph T Apuzzo
 ** GPFS SME (Linux, Windows, AIX), Linux LPI-c1
 ** http://www.linkedin.com/in/japuzzo/
 **/
_______________________________________________
Mid-Hudson Valley Linux Users Group                  http://mhvlug.org
https://mhvlug.org/cgi-bin/mailman/listinfo/mhvlug

Upcoming Meetings (6pm - 8pm)                         Vassar College
  Apr 2 - Nginx: High-Performance HTTP Server, Reverse Proxy, and IMAP/POP3 
Proxy Server
  May 7 - Google App Engine
  Jun 4 - Samba: Can We All Just Get Along?

Reply via email to