Mailing List Archive: Q: select between multiple signing key

Q: select between multiple signing key

Aug 20, 2018, 11:57 PM

Post #1 of 3 (283 views)

Hi,

I've generated multiple sign subkey but could not select it,
only last generated one was used.

> $ gpg2 --edit-key henrich@example.jp
> gpg (GnuPG) 2.2.8; Copyright (C) 2018 Free Software Foundation, Inc.
> This is free software: you are free to change and redistribute it.
> There is NO WARRANTY, to the extent permitted by law.
>
> sec rsa2048/A65B17610C406CE6
> created: 2018-08-21 expires: never usage: SC
> trust: ultimate validity: ultimate
> ssb rsa2048/4B9A876348781F24
> created: 2018-08-21 expires: never usage: E
> ssb rsa2048/F216455835F7F392
> created: 2018-08-21 expires: never usage: S
> ssb rsa2048/BD6695496E30735F
> created: 2018-08-21 expires: never usage: S
> [ultimate] (1). Hideki Yamane <henrich@example.jp>

There are three sign keys (one is Master, other two are subkey).
Then tried to sign file with Masterkey...

> $ gpg2 --default-key A65B17610C406CE6 --clearsign .bashrc

But asked passphrase for BD6695496E30735F, the last generated one.

My question is
- Can we have multiple signature subkey on one GPG key?
- If so, how do select it?
- If not, why we can do exec addkey?

--
Regards,

Hideki Yamane henrich @ debian.org/iijmio-mail.jp

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Q: select between multiple signing key [ In reply to ]

peter at digitalbrains

Aug 21, 2018, 1:57 AM

Post #2 of 3 (283 views)

Permalink

Hi,

On 21/08/18 08:57, Hideki Yamane wrote:
> - If so, how do select it?

From the man page:

Section "HOW TO SPECIFY A USER ID", subsection "By key Id":

> When using gpg an exclamation mark (!) may be appended to force
> using the specified primary or secondary key and not to try and
> calculate which primary or secondary key to use.

And so:

$ gpg2 --default-key A65B17610C406CE6\! --clearsign .bashrc

HTH,

Peter.

--
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at <http://digitalbrains.com/2012/openpgp-key-peter>

Re: Q: select between multiple signing key [ In reply to ]

henrich at iijmio-mail

Aug 22, 2018, 8:26 PM

Post #3 of 3 (281 views)

Permalink

Hi Peter,

On Tue, 21 Aug 2018 10:57:15 +0200
Peter Lebbing <peter@digitalbrains.com> wrote:
> Section "HOW TO SPECIFY A USER ID", subsection "By key Id":
>
> > When using gpg an exclamation mark (!) may be appended to force
> > using the specified primary or secondary key and not to try and
> > calculate which primary or secondary key to use.
>
> And so:
>
> $ gpg2 --default-key A65B17610C406CE6\! --clearsign .bashrc

Yes, it work well. Thank you!

--
Regards,

Hideki Yamane henrich @ debian.org/iijmio-mail.jp

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Mailing List Archive

Mailing List Archive

Attached Files: