From 4be60dbd1947c7fff960531def3948fef014d391 Mon Sep 17 00:00:00 2001 From: Mikaela Suomalainen Date: Tue, 10 Dec 2019 13:56:55 +0200 Subject: [PATCH] gpg.conf: keyserver-option no-self-sigs-only Fixes `gpg --fetch-keys` for my workflow plan of attempting to fetch my signatures on keys I trust from somewhat trustworthy place. --- .mikaela/gpg.conf | 8 ++++---- gpg/gpg.conf | 8 ++++---- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.mikaela/gpg.conf b/.mikaela/gpg.conf index f078b0ee..6784aa2a 100644 --- a/.mikaela/gpg.conf +++ b/.mikaela/gpg.conf @@ -27,11 +27,11 @@ trusted-key 0x99392F62BAE30723 #local-user 0xDC189FE6FA9BD685 #trusted-key 0xDC189FE6FA9BD685 -# Ignore preferred keyserver -keyserver-options no-honor-keyserver-url +# Ignore preferred keyserver and also import non-self-sigs +keyserver-options no-honor-keyserver-url,no-self-sigs-only # The defaults are apparently self-sigs-only,import-clean starting from -# gpg 2.2.17, but there seem to be controversial views on them and I am -# not sure what way to go, so I am opting to trust the distribution. +# gpg 2.2.17, but there seem to be controversial views on them and I need +# some not-self-sigs with `--fetch-keys` # Debian uses self-sigs-only (while I would be fine with import-clean) # * https://dev.gnupg.org/T4628#128513 # Arch Linux reverts the change going by no-self-sigs-only,no-import-clean diff --git a/gpg/gpg.conf b/gpg/gpg.conf index dae4fadc..eea904e0 100644 --- a/gpg/gpg.conf +++ b/gpg/gpg.conf @@ -28,11 +28,11 @@ #local-user 0xDC189FE6FA9BD685 # MIKAELA_GREP # MIKAELA_GREP_GPG #trusted-key 0xDC189FE6FA9BD685 # MIKAELA_GREP # MIKAELA_GREP_GPG -# Ignore preferred keyserver -keyserver-options no-honor-keyserver-url +# Ignore preferred keyserver and also import non-self-sigs +keyserver-options no-honor-keyserver-url,no-self-sigs-only # The defaults are apparently self-sigs-only,import-clean starting from -# gpg 2.2.17, but there seem to be controversial views on them and I am -# not sure what way to go, so I am opting to trust the distribution. +# gpg 2.2.17, but there seem to be controversial views on them and I need +# some not-self-sigs with `--fetch-keys` # Debian uses self-sigs-only (while I would be fine with import-clean) # * https://dev.gnupg.org/T4628#128513 # Arch Linux reverts the change going by no-self-sigs-only,no-import-clean