[TriLUG] Signed keys

Tanner Lovelace lovelace at wayfarer.org
Fri Jan 18 17:25:45 EST 2002


On Fri, 2002-01-18 at 09:07, Ken Wahl wrote:
> OK. I downloaded your new key and yes the uids are reversed.  How did
> you do it?  I thought there was no way to change the order of uids in
> gpg, although I've heard that capability might be present in 1.0.7

Well, I'm using gpg 1.0.6 and after a bit of searching I found
that a few versions ago gpg decided to try to do some "intelligent"
ordering of user ids.  What this means is that they look
at the self-signature on the user id and decide that the most
recent one is the primary user id.  The main problem with this
is that if you add a new user id, then the self-signature
on it is automatically newer than the original one and that's
the one that becomes the "primary" one for gpg.  This is
obviously *not* what I wanted when I added my secondary
user id (which I just want to use to sign rpms that I might
make), so I added another self signature to my other user
ID which was newer than the other one.  Since the keyservers
won't delete anything on the key, it ends up that the
user id has two self-signatures.  A bit of a nuisance, but
it works...

Tanner (who's watching the 8 fire trucks just outside that
are working on the fire 1 block down...)
-- 
Tanner Lovelace | lovelace at wayfarer.org | http://wtl.wayfarer.org/
--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--
GPG Fingerprint = A66C 8660 924F 5F8C 71DA  BDD0 CE09 4F8E DE76 39D4
GPG Key can be found at http://wtl.wayfarer.org/lovelace.gpg.asc
--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--*--
 Those who are willing to sacrifice essential liberties for a little 
 order, will lose both and deserve neither.  --  Benjamin Franklin 

 History teaches that grave threats to liberty often come in times
 of urgency, when constitutional rights seem too extravagant to 
 endure.  --  Justice Thurgood Marshall, 1989 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 240 bytes
Desc: This is a digitally signed message part
URL: <http://www.trilug.org/pipermail/trilug/attachments/20020118/e57a2505/attachment-0001.pgp>


More information about the TriLUG mailing list