Page MenuHome GnuPG

Not possible to tell which keys failed from gen_key status.
Closed, ResolvedPublic

Description

Release: 1.2.4

Environment

i686 Linux 2.6.4, Debian Package: gnupg, Version: 1.2.4-2

Description

When generating more than one key at a time, it isn't possible to tell which keys fail, or which keys succeed.

How To Repeat

In a batch requesting multiple keys, some with good parameters, and some with bad (Key-Type: QSA). For example:

Key-Type: DSA
Name-Email: jdoe@example.org
Key-Length: 1024
Name-Real: John Doe
Key-Type: QSA
Name-Email: jdoe@example.org
Key-Length: 1024
Name-Real: John Doe

gpg --homedir=tmp/gen_key_test --status-fd 2 --gen-key --batch params.txt

It is impossible to tell which set of parameters succeed, and which failed. There is no indication if KEY_CREATED, was the first or the second. See the attached typescript for the status output.

Fix

Add a new status keyword for failed --gen-key.

Release Note

Changed in 1.3.91. Watch out for KEY_NOT_CREATED and the new keyword "Handle:" in doc/DETAILS.