Package: monkeysphere Version: 0.40-2 Severity: important Control: affects -1 gnupg Control: tags -1 upstream
Modern versions of GnuPG print out the fingerprints of all subkeys in addition to the primary key, especially when doing --list-colons. This causes m-a c+ to fail due to a perceived ambiguity: 0 root@tester:~# monkeysphere-authentication c+ 0EE5BE979282D80B9F7540F1CCD2ED94D21739E9 More than one fingerprint found: 0EE5BE979282D80B9F7540F1CCD2ED94D21739E9 C7898678D456E06B968D50D3125868EA4BFA08E4 6639DB0BBB61AB268BF7D5F9DC104C4E0CA757FB D568EF3E553B8E24FB07A561C61BD3EC21484CFF EB9691287A7ADDE3757D911EA52401B11BFDFA5C 139C1D8C5E58B42FFE7FA04C3714729214D5DA70 EDB2E74F56FCF2B67297B73524ECFF5AFF68370A B29F4E9BEE4BFC4C75A2936EA70A96E1439EA852 Please use a more specific key ID. 255 root@tester:~# This should be fixed by doing better filtering in the fingerprint selection step, probably by limiting the selection to the first fpr: record after a pub: record. --dkg -- System Information: Debian Release: stretch/sid APT prefers testing-debug APT policy: (500, 'testing-debug'), (500, 'testing'), (200, 'unstable-debug'), (200, 'unstable'), (1, 'experimental-debug'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.8.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages monkeysphere depends on: ii adduser 3.115 ii gnupg 2.1.16-2 ii libcrypt-openssl-rsa-perl 0.28-3+b1 ii libperl5.24 [libdigest-sha-perl] 5.24.1~rc3-3 ii lockfile-progs 0.1.17 Versions of packages monkeysphere recommends: ii agent-transfer 0.40-2 ii cron 3.0pl1-128 ii netcat-openbsd [netcat] 1.105-7 ii netcat-traditional [netcat] 1.10-41 ii openssh-client 1:7.3p1-3+b1 ii socat 1.7.3.1-2 ii ssh-askpass 1:1.2.4.1-9 Versions of packages monkeysphere suggests: ii msva-perl [monkeysphere-validation-agent] 0.9.2-1 -- Configuration Files: /etc/monkeysphere/monkeysphere-authentication.conf changed [not included] -- no debconf information