Gpgtools MacGPG2 → 2.2.17

Comments and changes to this ticket

• You flagged this item as spam.
  

  Mento July 17th, 2019 @ 12:13 PM

  • State changed from “new” to “fixed”

  https://github.com/GPGTools/MacGPG2/commit/813089e69dd41c10cfc24ef5...

• 

  steve July 22nd, 2019 @ 11:52 PM

  macOS 10.14.5
  GPG Suite 2018.5 + test14.7z

  Verified

  1. created sec/pub key for some@email.org
     
  2. upload public key to keys.openpgp.org
     
  3. export sec/pub and pub key locally
     
  4. search for some@email.org on keys.openpgp.org -> nothing found (expected)
     
  5. search for fingerprint -> key found (expected)
     
  6. without verifying the email, revoke key locally and upload public key when asked once revocation is done
     
  7. remove sec/pub key and import public key locally
     
  8. select public key and update key from server (cmd+u)
     
  9. revoked signature is added to existing local public key and by that the local public key shows as revoked (expected)
     
  10. this is also the case when manually importing the revoked public key locally (expected)

  TBD GPG Keychain will not import a revoked public key. "1 key processed, 0 keys imported"
  We probably should allow this: When a signed message is received (or is an old signed msg) but the pub key for verification does not exist in GPG Keychain, hagrid is asked.

  This is easily reproduced by trying to import a downloaded public key, which is not verified and revoked from hagrid.

• 

  steve July 23rd, 2019 @ 12:22 AM

  test keys, pw 123

  • testignore_(FE4F71E3)_–_Geheim.asc 9.7 KB
  • testignore_(FE4F71E3)_–_Öffentlich.asc 3.1 KB
  • C760BDCB8E210FBC5CA9CD198006E42EFE4F71E3_(hagrid_pub_revoked).asc 3 KB
• 

  steve July 29th, 2019 @ 12:11 PM

  • State changed from “fixed” to “verified”

  re-tested w 2466n + custom built GPG Keychain 1.4.7 (d19c3f5e+) (0n)
  verified

• 

  steve August 25th, 2019 @ 09:30 PM

  • State changed from “verified” to “released”

  [bulk edit]