Re: [gentoo-dev] Key mystery, possible solved - subkeys!

[Martin Schlemmer <azarah@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 1626 bytes --]

On Fri, 2005-03-11 at 03:11 -0800, Robin H. Johnson wrote:
> On Fri, Mar 11, 2005 at 12:41:31PM +0200, Martin Schlemmer wrote:
> > > I know all of these servers are up to date:
> > > wwwkeys.pgp.net [all 10 servers]
> > > subkeys.pgp.net [all 5 servers]
> > > pgp.mit.edu
> > > keyserver.kjsl.com
> > > the.earth.li
> > > 
> > > The expiry date of my key should be 2008-03-09. If it's older than this, you
> > > have an old copy of my key.
> >  [screenshot of pgp.mit.edu not having my key]
> Ah, that explains it. I sign my email with a specific subkey. I use
> another subkey for Gentoo ebuild signing. I have a few other subkeys for
> other purposes, and using subkeys you can still preserve your identity,
> while being able to change the actual key hash you use for doing things.
> 
> pgp.mit.edu doesn't supported subkeys. Only four servers in
> wwwkeys.pgp.net rotation are sub-key capable.
> 
> All of subkeys.pgp.net, keyserver.kjsl.com, the.earth.li are sub-key
> capable, and behave correctly.
> 
> keyserver.net used to be decent and support subkeys, but they were
> bought out by veredis and the service has gone badly downhill.
> 
> I've posted my latest key up here:
> http://www.orbis-terrarum.net/robbat2-gnupg-key-with-subkeys.gpg
> 
> Import it, and see if your mail clients still complain.
> 

Changed the keyserver fixes it as well - ps, can you specify more than
one keyserver line, or more than one server per line ?  The manual do
not seem to touch that ...


-- 
Martin Schlemmer
Gentoo Linux Developer, Desktop/System Team Developer
Cape Town, South Africa


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]