Page MenuHome GnuPG
Create Task
Maniphest T2453

Web of Trust: Differents results between Windows and Linux
Open, NormalPublic
Actions

Description

Hi,

When I import a private key and a set of public keys, one of the public key is
defined as "undef" on Windows instead of "full" like on Linux.

I made my tests on Linux (Centos and Fedora) with GnuPG 1.4.18 and 1.4.21,
2.0.22, 2.0.30 and 2.1.13.
The results of the following commands are always the same whatever the version
of GnuPG:

--check-trustdb :
gpg: marginals needed: 3 completes needed: 1 trust model: pgp
gpg: depth: 0 valid: 1 signed: 1 trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1 valid: 1 signed: 87 trust: 0-, 0q, 0n, 0m, 1f, 0u
gpg: depth: 2 valid: 87 signed: 1 trust: 0-, 0q, 0n, 0m, 87f, 0u
gpg: depth: 3 valid: 1 signed: 0 trust: 1-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2020-10-08

Others informations on the keys :
--list-secret-keys :
sec 2048R/9B0994F2 2016-07-05 [expires: 2021-07-04]
uid TEST.MY
ssb 2048R/639389E0 2016-07-05

--list-key --list-options show-uid-validity 5D4519BE :
pub 2048R/5D4519BE 2015-09-28 [expires: 2021-03-29]
uid [ full ] TEST.OTHER <test.other@set>

--list-sigs --list-options show-uid-validity 5D4519BE :
pub 2048R/5D4519BE 2015-09-28 [expires: 2021-03-29]
uid [ full ] TEST.OTHER <test.other@set>
sig 3 5D4519BE 2015-09-28 TEST.OTHER <test.other@set>
sig 2B338A13 2015-09-28 TEST.MASTER <test.master@set>

--list-key --list-options show-uid-validity 2B338A13 :
pub 2048R/2B338A13 2015-09-28 [expires: 2031-03-29]
uid [ full ] TEST.MASTER <test.master@set>

--list-sigs --list-options show-uid-validity 2B338A13 :
pub 2048R/2B338A13 2015-09-28 [expires: 2031-03-29]
uid [ full ] TEST.MASTER <test.master@set>
sig 3 2B338A13 2015-09-28 TEST.MASTER <test.master@set>
sig 5549FB2A 2015-09-30 TEST.MASTER.2 <test.master.2@set>

--list-key --list-options show-uid-validity 5549FB2A :
pub 2048R/5549FB2A 2014-01-20 [expires: 2029-07-20]
uid [ full ] TEST.MASTER.2 <test.master.2@set>
sub 2048R/E20A69B7 2014-01-20 [expires: 2029-07-20]

--list-sigs --list-options show-uid-validity 5549FB2A :
pub 2048R/5549FB2A 2014-01-20 [expires: 2029-07-20]
uid [ full ] TEST.MASTER.2 <test.master.2@set>
sig N 5549FB2A 2014-06-11 TEST.MASTER.2 <test.master.2@set>
sig 9B0994F2 2016-08-30 TEST.MY
sub 2048R/E20A69B7 2014-01-20 [expires: 2029-07-20]
sig 5549FB2A 2014-01-20 TEST.MASTER.2 <test.master.2@set>

On windows, I tested with GnuPG 1.4.18, 1.4.20, 1.4.21, 2.0.22, 2.0.29 and 2.0.30.
The results of the following commands are always the same whatever the version
of GnuPG:

--check-trustdb :
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0 valid: 1 signed: 1 trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1 valid: 1 signed: 87 trust: 0-, 0q, 0n, 0m, 1f, 0u
gpg: depth: 2 valid: 87 signed: 1 trust: 8-, 0q, 0n, 0m, 79f, 0u
gpg: next trustdb check due at 2020-10-08

Others informations on the keys :
--list-secret-keys :
sec 2048R/9B0994F2 2016-07-05 [expires: 2021-07-04]
uid TEST.MY
ssb 2048R/639389E0 2016-07-05

--list-key --list-options show-uid-validity 5D4519BE :
pub 2048R/5D4519BE 2015-09-28 [expires: 2021-03-29]
uid [ undef ] TEST.OTHER <test.other@set>

--list-sigs --list-options show-uid-validity 5D4519BE :
pub 2048R/5D4519BE 2015-09-28 [expires: 2021-03-29]
uid [ undef ] TEST.OTHER <test.other@set>
sig 3 5D4519BE 2015-09-28 TEST.OTHER <test.other@set>
sig 2B338A13 2015-09-28 TEST.MASTER <test.master@set>

--list-key --list-options show-uid-validity 2B338A13 :
pub 2048R/2B338A13 2015-09-28 [expires: 2031-03-29]
uid [ full ] TEST.MASTER <test.master@set>

--list-sigs --list-options show-uid-validity 2B338A13 :
pub 2048R/2B338A13 2015-09-28 [expires: 2031-03-29]
uid [ full ] TEST.MASTER <test.master@set>
sig 3 2B338A13 2015-09-28 TEST.MASTER <test.master@set>
sig 5549FB2A 2015-09-30 TEST.MASTER.2 <test.master.2@set>

--list-key --list-options show-uid-validity 5549FB2A :
pub 2048R/5549FB2A 2014-01-20 [expires: 2029-07-20]
uid [ full ] TEST.MASTER.2 <test.master.2@set>
sub 2048R/E20A69B7 2014-01-20 [expires: 2029-07-20]

--list-sigs --list-options show-uid-validity 5549FB2A :
pub 2048R/5549FB2A 2014-01-20 [expires: 2029-07-20]
uid TEST.MASTER.2 <test.master.2@set>
sig N 5549FB2A 2014-06-11 TEST.MASTER.2 <test.master.2@set>
sig 9B0994F2 2016-08-30 TEST.MY
sub 2048R/E20A69B7 2014-01-20 [expires: 2029-07-20]
sig 5549FB2A 2014-01-20 TEST.MASTER.2 <test.master.2@set>

As you can see, I have the same trust paths on the both platforms: TEST.MY ->
TEST.MASTER.2 -> TEST.MASTER -> TEST.OTHER
But on Windows, TEST.OTHER is "undefined" rather than "full" trust on Linux.

Do you can have any ideas for this issue ?
Or how can I output more debug information to help you ?

Thank you,
Guillaume Smaha

Event Timeline

Mouxon added projects: gnupg, Bug Report.Aug 30 2016, 4:21 PM
Mouxon added a subscriber: Mouxon.
• werner added a subscriber: • werner.Sep 1 2016, 11:25 AM

Are the ownertrust values identical on boths systems?

Compare the output of

gpg --export-ownertrust | sort

on noth systems.

• werner lowered the priority of this task from High to Normal.Sep 1 2016, 11:25 AM
Mouxon added a comment.Sep 2 2016, 7:47 AM

No they are differents.

I have 89 values on Linux and 81 values on Windows.

diff win-owner.txt rhel-owner.txt
12a13

47FB20102BAEB52CB6DC56177129CB6A081FEBAD:5:

20a22

5855DD9E25B9A8DC2FBA57AA6F7844ED8F847C04:5:

31a34

7973C95FEF2CB9DB2BFE28344A0A560FB0B37102:5:

45a49

9A21AEC12074E70350F6A7E34A7395B4E1F81D9F:5:

52a57

AAB5C4863EEC5C7F19CF2BA4203A3B252B338A13:5:

71a77

E3B8C9513CDE7EE4525E2D2DC8A0CB9453732618:5:

75a82

F47ABE16FE74A02D8D91F742AF1E698C4C389893:5:

77a85

F9769C31CD79BA5B71385546C66AA2A8FF3DC51E:5:

In the above diff, I noticed the value AAB5C4863EEC5C7F19CF2BA4203A3B252B338A13
which correspond to TEST.MASTER