Page MenuHome GnuPG
Create Task
Maniphest T6042

Cannot search on keyserver from kleopatra 3.1.22 inside an AppImage of GnuPG Desktop or GnuPG VS Desktop
Closed, DuplicatePublic
Actions

Description

Hello ...

Search from AppImage GUI (GnuPG-Desktop) for key on http://pgpkeys.eu:11371 does not work ! (see screenshot)

user@xxx:/opt/GnuPGDesktop$

./gnupg-desktop-2.2.35-x86_64.AppImage --gui

gpg-agent[4475]: Verzeichnis `/home/user/.gnupg' erzeugt
gpg-agent[4475]: Verzeichnis `/home/user/.gnupg/private-keys-v1.d' erzeugt
gpg-agent[4475]: trying to steal socket from running gpg-agent
gpg-agent[4478]: gpg-agent (GnuPG) 2.2.35 started
org.kde.pim.libkleo: agentIsRunning : Creating context for Assuan engine failed: Not operational (code: 176, source: Unspecified source)
qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 2296, resource id: 6431618, major code: 40 (TranslateCoords), minor code: 0
Goodbye from GnuPG Desktop 2.2.35!
user@xxx:/opt/GnuPGDesktop$ gpg-agent[4478]: parent process died - shutting down
gpg-agent[4478]: gpg-agent (GnuPG) 2.2.35 stopped

Search from AppImage GnuPG-commandline for key on http://pgpkeys.eu:11371 works !!

user@xxx:/opt/GnuPGDesktop$

./gnupg-desktop-2.2.35-x86_64.AppImage -c gpg --search-keys weasel@xxx.xxx
gpg: data source: http://pgpkeys.eu:11371
(1) Peter Palfrader

Peter Palfrader <weasel@xxx.xxx>
Peter Palfrader <peter@xxx.xxx>
  4096 bit RSA key xxxxxxxxxxxxxxxx, erzeugt: 2003-03-24

Keys 1-1 of 1 for "weasel@xxx.xxx". Eingabe von Nummern, Nächste (N) oder Abbrechen (Q) > n
Goodbye from GnuPG Desktop 2.2.35!

The same problem on GnuPG VS Desktop AppImage ...

./gnupg-vs-desktop-3.1.22.0-x86_64.AppImage --gui

gpg-agent[5946]: Verzeichnis `/home/user/.gnupg-vsd/private-keys-v1.d' erzeugt
gpg-agent[5947]: gpg-agent (GnuPG) 2.2.35 started
org.kde.pim.libkleo: agentIsRunning : Creating context for Assuan engine failed: Not operational (code: 176, source: Unspecified source)
qt.qpa.xcb: QXcbConnection: XCB error: 3 (BadWindow), sequence: 1284, resource id: 6661120, major code: 40 (TranslateCoords), minor code: 0
Goodbye from GnuPG VS-Desktop 3.1.22!
user@xxx:/opt/GnuPGDesktop$ gpg-agent[5947]: parent process died - shutting down
gpg-agent[5947]: gpg-agent (GnuPG) 2.2.35 stopped

Search from AppImage GnuPG-commandline for key on http://pgpkeys.eu:11371 works !!

user@xxx:/opt/GnuPGDesktop$

./gnupg-vs-desktop-3.1.22.0-x86_64.AppImage -c gpg --search-keys weasel@xxx.xxx

gpg: data source: https://162.213.33.8:443
(1) Peter Palfrader

Peter Palfrader <weasel@xxx.xxx>
Peter Palfrader <peter@xxx.xxx>
  4096 bit RSA key xxxxxxxxxxxxxxxx, erzeugt: 2003-03-24

(2) Peter Palfrader

Peter Palfrader <weasel@xxx.xxx>
Peter Palfrader <peter@xxx.xxx>
Peter Palfrader <ppalfrad@xxx.xxx.xxx.xxx>
  1024 bit DSA key xxxxxxxxxxxxxxxx, erzeugt: 1999-11-10

Keys 1-2 of 2 for "weasel@xxx.xxx". Eingabe von Nummern, Nächste (N) oder Abbrechen (Q) > n
Goodbye from GnuPG VS-Desktop 3.1.22!

Search for keys from AppImage-commandline works ... also the Windows version of Gpg4Win 3.1.22 (self-build) works without errors with nearly the same central-configs !
Only the AppImage-binaries (requests from kleopatra GUI) are unable to display the search-result.

The System is a Debian 11.3 Bullseye with latest updates (GnuGP 2.2.27) ...

Best regards,

Veit Berwig

Details

Version
3.1.22

Related Objects
Search...

Event Timeline

vitusb created this task.Jun 24 2022, 6:24 PM
vitusb assigned this task to • werner.Jun 28 2022, 11:54 AM
vitusb added projects: gpg4win, AppImage.
aheinecke reassigned this task from • werner to ikloecker.Jul 6 2022, 1:09 PM
aheinecke triaged this task as Normal priority.
aheinecke added subscribers: ikloecker, • werner, aheinecke.

I can reproduce the problem. Under Windows it works, with my development setup with GnuPG 2.3 it works, but in the appimage I get the error that all keys were skipped.

I could understand that 2.3 works because I get a different KS_SEARCH result there which lists the fingerprint. But I do not understand why it works on Windows with 2.2.35 and not in the Appimage with 2.2.35. The search results are the same and do not list a fingerprint.

@ikloecker Do you have an idea why this could happen? Is there maybe a commit that we might have somehow missed? (Even though the Appimage should have been compiled from the same sources)

Under Windows I get:

KEYSERVER http://162.213.33.9:11371
OK
KS_SEARCH aheinecke
S SOURCE http://162.213.33.9:11371
D info:1:5%0Apub:1FDF723CF462B6B1:1:3072:1449568917::%0Auid:Andre Heinecke <aheinecke@g10code.com>:1576160050:1764928917:%0Auid:Andre Heinecke <aheinecke@intevation.de>:1576160048:1764928917:%0Auid:Andre Heinecke <aheinecke@chelydra.at>:1554303412:1764928917:%0Auid:Andre Heinecke <aheinecke@gnupg.com>:1552303633:1764928917:%0Auid:Andre Heinecke <aheinecke@gnupg.org>:1449573137:1764928917:%0Auid:Andre Heinecke <andre@heinecke.or.at>:1449572689:1764928917:%0Auid:Andre Heinecke <andre.heinecke@intevation.de>:1449572665:1764928917:%0Apub:ECF32937F6337162:17:1024:1210523493::%0Apub:55BE9C59C97822F5:0:0:-62135596800::%0Apub:5DE9385CC97822F5:17:1024:1258967509::%0Apub:F869996058BD45EC:19:771:1416328129::%0A

In the appimage:

KEYSERVER https://162.213.33.8:443
OK
KS_SEARCH aheinecke
dirmngr[24511.0]: resolve_dns_addr for '162.213.33.8': 'keyserver.ubuntu.com' [already known]
dirmngr[24511.0]: certificate cached
dirmngr[24511.0]: certificate cached
dirmngr[24511.0]: Note: non-critical certificate policy not allowed
S SOURCE https://162.213.33.8:443
D info:1:5%0Apub:1FDF723CF462B6B1:1:3072:1449568917::%0Auid:Andre Heinecke <aheinecke@g10code.com>:1576160050:1764928917:%0Auid:Andre Heinecke <aheinecke@intevation.de>:1576160048:1764928917:%0Auid:Andre Heinecke <aheinecke@chelydra.at>:1554303412:1764928917:%0Auid:Andre Heinecke <aheinecke@gnupg.com>:1552303633:1764928917:%0Auid:Andre Heinecke <aheinecke@gnupg.org>:1449573137:1764928917:%0Auid:Andre Heinecke <andre@heinecke.or.at>:1449572689:1764928917:%0Auid:Andre Heinecke <andre.heinecke@intevation.de>:1449572665:1764928917:%0Apub:ECF32937F6337162:17:1024:1210523493::%0Apub:55BE9C59C97822F5:0:0:-62135596800::%0Apub:5DE9385CC97822F5:17:1024:1258967509::%0Apub:F869996058BD45EC:19:771:1416328129::%0A
ikloecker added a comment.Jul 6 2022, 2:28 PM

Looks like a duplicate of T5725: Kleopatra: Certificate lookup shows only one result even if there are 100s matches. Solution: Use a key server that returns fingerprints.

ikloecker closed this task as a duplicate of T5725: Kleopatra: Certificate lookup shows only one result even if there are 100s matches.Jul 6 2022, 2:28 PM
aheinecke added a comment.Jul 6 2022, 3:30 PM

But this is with the default keyserver keys.ubuntu.com it shows the fingerprint if I do a search --with-colons with 2.3 and the same keyserver (addressed via IP) on the same machine returns results on Windows and says No Fingerprints in the app image. This is what I found so strange here.

ikloecker added a comment.Jul 6 2022, 4:34 PM

I guess the problem is that the fix for T5741: dirmngr does not ask keyservers for fingerprints wasn't backported to 2.2.

vitusb added a comment.Jul 6 2022, 10:02 PM

Hello ...

I may report, that I've tested this behaviour with "kleopatra" with serveral keyservers.

On Windows with "kleopatra" by gpg4win 3.1.16 and gpg4win 3.1.22 (self-built with GnuPG 2.2.35) this works fine; also with native "kleopatra" (native installation in Debian 11.3 with latest updates from 30.06.2022) with GnuPG 2.2.27 (Debian Packages) on the same keyserver ...

All search-requests directly by gpg (out of the AppImage of "gnupg-desktop-2.2.35-x86_64.AppImage" (self-built) and "gnupg-vs-desktop-3.1.22.0-x86_64.AppImage" worked also fine ...

Only the "kleopatra" search-requests out of the AppImages of "gnupg-desktop-2.2.35-x86_64.AppImage" (self-built) and "gnupg-vs-desktop-3.1.22.0-x86_64.AppImage" failed in the manner shown above.

In response to https://dev.gnupg.org/T6042#159872 ...
... i can provide a loopback-test with a standard standalone SKS-Keyserver that is running on the Debian system (mentioned above) in the next hours ...

... but i don't understand in which way T6042 makes sense here, when the Windows versions and the older Debian-Version (native kleopatra on Deb. 11.3 above) are working without a hassle in this situation ... there must be something special to the AppImage-relocations ...

Best Regards ...

ikloecker added a comment.Jul 6 2022, 10:44 PM

Just to clarify: Does this only happen with self-built AppImages? Or does this also happen with AppImages provided by gnupg.com/gnupg.org? (I haven't found AppImages to download on gnupg.org.)

A very old test AppImage that I have built last October works.

vitusb added a comment.Jul 6 2022, 11:26 PM

Hi ...

Just to clarify: Does this only happen with self-built AppImages? Or does this also happen with AppImages provided by gnupg.com/gnupg.org?

This happened, like i mentioned above, with a self-build AppImage of kleopatra 3.1.22 (so called "gnupg-desktop-2.2.35-x86_64.AppImage" ) AND the original AppImage, which was provided by GnuPG.Com (so called: "gnupg-vs-desktop-3.1.22.0-x86_64.AppImage").

I did a self-built of the 3.1.22 LTS-Release snapshot also in order to reproduce this behavoiur ... and here, the erratic behaviour of "kleo" is in the same manner like the original build: "gnupg-vs-desktop-3.1.22.0-x86_64.AppImage" ...

Best regards ...

vitusb added a comment.Jul 7 2022, 1:02 PM

Hello, i did some debugging with my local sks keyserver version 1.1.6+ on Debian:

root@keyserver:/home/user# dpkg --list sks
Gewünscht=Unbekannt/Installieren/R=Entfernen/P=Vollständig Löschen/Halten
| Status=Nicht/Installiert/Config/U=Entpackt/halb konFiguriert/
         Halb installiert/Trigger erWartet/Trigger anhängig
|/ Fehler?=(kein)/R=Neuinstallation notwendig (Status, Fehler: GROSS=schlecht)
||/ Name           Version                      Architektur  Beschreibung
+++-==============-============================-============-=================================
ii  sks            1.1.6+git20210302.c3ba6d5a-3 amd64        Synchronizing OpenPGP Key Server
root@keyserver:/home/user# systemctl status sks
  sks.service - SKS database service
     Loaded: loaded (/lib/systemd/system/sks.service; enabled; vendor preset: disabled)
     Active: active (running) since Thu 2022-07-07 12:30:01 CEST; 1h 43min left
       Docs: man:sks(8)
   Main PID: 1798 (sks)
      Tasks: 1 (limit: 18916)
     Memory: 24.6M
        CPU: 237ms
     CGroup: /system.slice/sks.service
             └─1798 /usr/sbin/sks -stdoutlog db
Jul 07 12:30:01 keyserver systemd[1]: Started SKS database service.
Jul 07 12:30:01 keyserver sks[1798]: 2022-07-07 12:30:01 sks_db, SKS version 1.1.6+
Jul 07 12:30:01 keyserver sks[1798]: 2022-07-07 12:30:01 Using BerkeleyDB version 5.3.28
Jul 07 12:30:01 keyserver sks[1798]: 2022-07-07 12:30:01 Copyright Yaron Minsky 2002, 2003, 2004
Jul 07 12:30:01 keyserver sks[1798]: 2022-07-07 12:30:01 Licensed under GPL. See LICENSE file for >
Jul 07 12:30:01 keyserver sks[1798]: 2022-07-07 12:30:01 http port: 11381
Jul 07 12:30:01 keyserver sks[1798]: 2022-07-07 12:30:01 Opening KeyDB database
Jul 07 12:30:06 keyserver sks[1798]: 2022-07-07 12:30:06 Database opened
Jul 07 12:30:06 keyserver sks[1798]: 2022-07-07 12:30:06 Applied filters: yminsky.dedup
  1. Here's the search request on local SKS keyserver
  2. by local native gpg-installation from Debian 11.3: #
  3. - ! this works ! -
root@keyserver:/home/user# gpgconf --list-options gpg | grep -i keyserver
Keyserver:1:0:Konfiguration der Schlüsselserver:0:0::::
keyserver:0:2:Benutze Schlüsselserver unter der URL:1:1::::"hkp%3a//192.168.2.71%3a11371
auto-key-locate:0:1:Benutze MECHANISMEN um Schlüssel über die Mailadresse aufzufinden.:1:1:MECHANISMEN:::"local%2ckeyserver

root@keyserver:/etc/gnupg# gpg --debug-all --search-keys palfrader

gpg: Optionen werden aus '/etc/gnupg/gpg.conf' gelesen
gpg: Optionen werden aus '[cmdline]' gelesen
gpg: enabled debug flags: packet mpi crypto filter iobuf memory cache memstat trust hashing ipc clock lookup extprog
gpg: DBG: [not enabled in the source] start
gpg: DBG: chan_3 <- # Home: /root/.gnupg
gpg: DBG: chan_3 <- # Config: /etc/gnupg/dirmngr.conf
gpg: DBG: chan_3 <- OK Dirmngr 2.2.27 at your service
gpg: DBG: connection to the dirmngr established
gpg: DBG: chan_3 -> GETINFO version
gpg: DBG: chan_3 <- D 2.2.27
gpg: DBG: chan_3 <- OK
gpg: DBG: chan_3 -> KEYSERVER --clear hkp://192.168.2.71:11371
gpg: DBG: chan_3 <- OK
gpg: DBG: chan_3 -> KS_SEARCH -- palfrader
gpg: DBG: chan_3 <- S PROGRESS tick ? 0 0
gpg: DBG: chan_3 <- S SOURCE http://192.168.2.71:11371
gpg: DBG: chan_3 <- D info:1:1%0Apub:25FC1614B8F87B52FF2F99B962AF4031C82E0039:1:4096:1048514712:1724861027:%0Auid:Peter Palfrader:1409501029::%0Auid:Peter Palfrader <weasel@debian.org>:1409501033::%0Auid:Peter Palfrader <peter@palfrader.org>:1409501033::%0A%0D%0A
gpg: data source: http://192.168.2.71:11371
gpg: DBG: chan_3 <- OK
gpg: DBG: iobuf-1.0: close '?'
(1)     Peter Palfrader
        Peter Palfrader <weasel@debian.org>
        Peter Palfrader <peter@palfrader.org>
          4096 bit RSA key 62AF4031C82E0039, erzeugt: 2003-03-24, verfällt: 2024-08-28
Keys 1-1 of 1 for "palfrader".  Eingabe von Nummern, Nächste (N) oder Abbrechen (Q) > n
gpg: DBG: chan_3 -> BYE
gpg: DBG: [not enabled in the source] stop
gpg: keydb: handles=0 locks=0 parse=0 get=0
gpg:        build=0 update=0 insert=0 delete=0
gpg:        reset=0 found=0 not=0 cache=0 not=0
gpg: kid_not_found_cache: count=0 peak=0 flushes=0
gpg: sig_cache: total=0 cached=0 good=0 bad=0
gpg: random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
              outmix=0 getlvl1=0/0 getlvl2=0/0
gpg: rndjent stat: collector=0x0000000000000000 calls=0 bytes=0
gpg: secmem usage: 0/65536 bytes in 0 blocks
  1. Here's th search-request on local SKS keyserver
  2. by gpg out of the self-build AppImage
  3. (gpg 2.2.35 / kleopatra 3.1.22): #
  4. - ! this works also ! -
user@keyserver:/opt$ ./gnupg-desktop-2.2.35-x86_64.AppImage -c gpg --debug-all --search-keys palfrader

gpg-agent[7433]: trying to steal socket from running gpg-agent
gpg-agent[7435]: gpg-agent (GnuPG) 2.2.35 started
gpg: WARNUNG: Unsichere Zugriffsrechte des Home-Verzeichnis `/home/user/.gnupg'
gpg: Optionen werden aus '/etc/gnupg/gpg.conf' gelesen
gpg: Optionen werden aus '[cmdline]' gelesen
gpg: enabled debug flags: packet mpi crypto filter iobuf memory cache memstat trust hashing ipc clock lookup extprog
gpg: DBG: [not enabled in the source] start
gpg: DBG: chan_4 <- # Home: /home/user/.gnupg
gpg: DBG: chan_4 <- # Config: /etc/gnupg/dirmngr.conf
gpg: DBG: chan_4 <- OK Dirmngr 2.2.27 at your service
gpg: DBG: connection to the dirmngr established
gpg: DBG: chan_4 -> GETINFO version
gpg: DBG: chan_4 <- D 2.2.27
gpg: DBG: chan_4 <- OK
gpg: WARNUNG: Der Server 'dirmngr' is älter als wir selbst (Version 2.2.27 < 2.2.35)
gpg: Hinweis: Wichtige Sicherheits-Fixes können in veralteten Servern fehlen.
gpg: Hinweis: Der Befehl "gpgconf --kill all" startet diese Server neu.
gpg: DBG: chan_4 -> KEYSERVER --clear hkp://192.168.2.71:11371       
gpg: DBG: chan_4 <- OK                                                  
gpg: DBG: chan_4 -> KS_SEARCH -- palfrader                                  
gpg: DBG: chan_4 <- S PROGRESS tick ? 0 0                                      
gpg: DBG: chan_4 <- S SOURCE http://192.168.2.71:11371                             
gpg: DBG: chan_4 <- D info:1:1%0Apub:25FC1614B8F87B52FF2F99B962AF4031C82E0039:1:4096:1048514712:1724861027:%0Auid:Peter Palfrader:1409501029::%0Auid:Peter Palfrader <weasel@debian.org>:1409501033::%0Auid:Peter Palfrader <peter@palfrader.org>:1409501033::%0A%0D%0A                                              
gpg: data source: http://192.168.2.71:11371                                                  
gpg: DBG: chan_4 <- OK                                                                         
gpg: DBG: iobuf-1.0: close '?'                                                                   
(1)     Peter Palfrader                                                                            
        Peter Palfrader <weasel@debian.org>                                                         
        Peter Palfrader <peter@palfrader.org>                                                         
          4096 bit RSA key 62AF4031C82E0039, erzeugt: 2003-03-24, verfällt: 2024-08-28
Keys 1-1 of 1 for "palfrader".  Eingabe von Nummern, Nächste (N) oder Abbrechen (Q) > n
gpg: DBG: chan_4 -> BYE
gpg: DBG: [not enabled in the source] stop
gpg: keydb: handles=0 locks=0 parse=0 get=0
gpg:        build=0 update=0 insert=0 delete=0
gpg:        reset=0 found=0 not=0 cache=0 not=0
gpg: kid_not_found_cache: count=0 peak=0 flushes=0
gpg: sig_cache: total=0 cached=0 good=0 bad=0
gpg: random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
              outmix=0 getlvl1=0/0 getlvl2=0/0
gpg: rndjent stat: collector=0x0000000000000000 calls=0 bytes=0
gpg: secmem usage: 0/32768 bytes in 0 blocks
Goodbye from GnuPG Desktop 2.2.35!
  1. Here's the search-request on local SKS keyserver
  2. by gpg out of the GnuPGVSDesktop AppImage: #
  3. - ! this works also, but SHOWS MUCH MORE KEYS ! -
user@keyserver:/opt$ ./gnupg-vs-desktop-3.1.22.0-x86_64.AppImage -c gpg --debug-all --search-keys palfrader

gpg: Optionen werden aus '[cmdline]' gelesen
gpg: enabled debug flags: packet mpi crypto filter iobuf memory cache memstat trust hashing ipc clock lookup extprog
gpg: DBG: [not enabled in the source] start
gpg: DBG: chan_4 <- # Home: /home/user/.gnupg-vsd
gpg: DBG: chan_4 <- # Config: /home/user/.gnupg-vsd/dirmngr.conf
gpg: DBG: chan_4 <- OK Dirmngr 2.2.35 at your service
gpg: DBG: connection to the dirmngr established
gpg: DBG: chan_4 -> GETINFO version
gpg: DBG: chan_4 <- D 2.2.35
gpg: DBG: chan_4 <- OK
gpg: DBG: chan_4 -> KS_SEARCH -- palfrader
gpg: DBG: chan_4 <- S PROGRESS tick ? 0 0
gpg: DBG: chan_4 <- S SOURCE https://162.213.33.9:443
gpg: DBG: chan_4 <- D info:1:12%0Apub:F322336E1D9B39C1:17:1024:889865754::%0Auid:Peter Palfrader <palfrader@writeme.com>:889865754::%0Apub:C0509B82C8B76BD3:17:1024:1042195712::%0Apub:1CDAA3A646D71B75:1:2048:898525303::%0Apub:62AF4031C82E0039:1:4096:1048514712::%0Auid:Peter Palfrader:1409501029:1724861027:%0Auid:Peter Palfrader <weasel@debian.org>:1409501033:1724861027:%0Auid:Peter Palfrader <peter@palfrader.org>:1409501033:1724861027:%0Apub:BFC050D7D1A3A329:1:1024:919724454::%0Apub:86CD40FA25135F7A:17:1024:1101381984::%0Apub:98EF91A036AFF58A:17:1024:890134122::%0Auid:Peter Palfrader <palfrader@writeme.com>:890134123::%0Apub:1440D7043CD35EBA:17:1024:1069835936::%0Apub:400DC0DB30FF2BEB:17:1024:1037911390::%0Apub:9AB6E526744E9E5C:17:1024:1006339441::%0Apub:85778528125430CC:1:2048:1041468200::%0Apub:DE7AAF6E94C09C7F:17:1024:942264711::%0Auid:Peter Palfrader:1154565316:1598717001:%0Auid:Peter Palfrader <weasel@debian.org>:1154565322:1598717001:%0Auid:Peter Palfrader <peter@palfrader.org>:1154565322:159871700
gpg: data source: https://162.213.33.9:443
gpg: DBG: iobuf-1.0: close '?'
gpg: DBG: iobuf-2.0: close '?'
gpg: DBG: iobuf-3.0: close '?'
gpg: DBG: iobuf-4.0: close '?'
gpg: DBG: iobuf-5.0: close '?'
gpg: DBG: iobuf-6.0: close '?'
gpg: DBG: iobuf-7.0: close '?'
gpg: DBG: iobuf-8.0: close '?'
gpg: DBG: iobuf-9.0: close '?'
gpg: DBG: iobuf-10.0: close '?'
gpg: DBG: iobuf-11.0: close '?'
gpg: DBG: chan_4 <- D 1:%0Auid:Peter Palfrader <ppalfrad@cosy.sbg.ac.at>:1154565322:1598717001:%0A
gpg: DBG: chan_4 <- OK
gpg: DBG: iobuf-12.0: close '?'
(1)     Peter Palfrader <palfrader@writeme.com>
          1024 bit DSA key F322336E1D9B39C1, erzeugt: 1998-03-14
(2)       1024 bit DSA key C0509B82C8B76BD3, erzeugt: 2003-01-10
(3)       2048 bit RSA key 1CDAA3A646D71B75, erzeugt: 1998-06-22
(4)     Peter Palfrader
        Peter Palfrader <weasel@debian.org>
        Peter Palfrader <peter@palfrader.org>
          4096 bit RSA key 62AF4031C82E0039, erzeugt: 2003-03-24
(5)       1024 bit RSA key BFC050D7D1A3A329, erzeugt: 1999-02-22
(6)       1024 bit DSA key 86CD40FA25135F7A, erzeugt: 2004-11-25
(7)     Peter Palfrader <palfrader@writeme.com>
          1024 bit DSA key 98EF91A036AFF58A, erzeugt: 1998-03-17
(8)       1024 bit DSA key 1440D7043CD35EBA, erzeugt: 2003-11-26
(9)       1024 bit DSA key 400DC0DB30FF2BEB, erzeugt: 2002-11-21
(10)      1024 bit DSA key 9AB6E526744E9E5C, erzeugt: 2001-11-21
(11)      2048 bit RSA key 85778528125430CC, erzeugt: 2003-01-02
(12)    Peter Palfrader
        Peter Palfrader <weasel@debian.org>
        Peter Palfrader <peter@palfrader.org>
        Peter Palfrader <ppalfrad@cosy.sbg.ac.at>
          1024 bit DSA key DE7AAF6E94C09C7F, erzeugt: 1999-11-10
Keys 1-12 of 12 for "palfrader".  Eingabe von Nummern, Nächste (N) oder Abbrechen (Q) > n
gpg: DBG: chan_4 -> BYE
gpg: DBG: [not enabled in the source] stop
gpg: keydb: handles=0 locks=0 parse=0 get=0
gpg:        build=0 update=0 insert=0 delete=0
gpg:        reset=0 found=0 not=0 cache=0 not=0
gpg: kid_not_found_cache: count=0 peak=0 flushes=0
gpg: sig_cache: total=0 cached=0 good=0 bad=0
gpg: random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
              outmix=0 getlvl1=0/0 getlvl2=0/0
gpg: rndjent stat: collector=0x0000000000000000 calls=0 bytes=0
gpg: secmem usage: 0/32768 bytes in 0 blocks
Goodbye from GnuPG VS-Desktop 3.1.22!

`
The strange behaviour is, that my self-build Appimage uses
the local config from /etc/gnupg and the "dirmngr" from
the system (2.2.27) and not the internal version (2.2.35) and
is also informing about this issue (see the log above).
The GnuPGVSDesktop-AppImage uses by default the ubuntu-keyserver.
althought i used my local keyserver in all configs under
/etc/gnupg ... with this config,

  • Kleopatra from AppImage of GnuPGVSDesktop fails in searching for the keys, when the internal UBUNTU-server is used !!
  • Searching on my local SKS-Keyserver works from all Versions !!

So i guess that has somethig to do with the fingerprinting-issue
https://dev.gnupg.org/T6042#159861 and the backported patch:
https://dev.gnupg.org/T6042#159872
`

Here are the screenshots

Kleopatra 3.1.22 (AppImage GnuPGVSDesktop) search for keys on local SKS keyserver works !

Kleopatra 3.1.11 (native local installed Debian Version) search for keys on local SKS keyserver works !

Kleopatra 3.1.22 (AppImage self-build version) search for keys on local SKS keyserver works !

Kleopatra 3.1.22 (AppImage GnuPGVSDesktop) search for keys on remote UBUNTU keyserver FAILS !!

Best regards ...

ikloecker added a subtask: T6067: dirmngr 2.2 does not ask keyservers for fingerprints.Jul 7 2022, 1:31 PM

Thanks for the analysis!

There are a few minor comments:

Here's the search-request on local SKS keyserver
by gpg out of the GnuPGVSDesktop AppImage: #
[...]
gpg: DBG: chan_4 <- S SOURCE https://162.213.33.9:443

The AppImage doesn't seem to use your local SKS keyserver. Note that GnuPGVSDesktop uses /home/user/.gnupg-vsd/dirmngr.conf which probably lacks a keyserver option for the local SKS keyserver.

The strange behaviour is, that my self-build Appimage uses
the local config from /etc/gnupg and the "dirmngr" from
the system (2.2.27) and not the internal version (2.2.35) and
is also informing about this issue (see the log above).

I clearly see 2.2.35 in the log above. Wrong log pasted?

Anyway, your analysis supports my conclusion, i.e. that Hockeypuck doesn't return fingerprints if they are not explicitly requested. I have opened a task for backporting the fix.

ikloecker changed the status of subtask T6067: dirmngr 2.2 does not ask keyservers for fingerprints from Open to Testing.Jul 26 2022, 9:54 AM
• werner closed subtask T6067: dirmngr 2.2 does not ask keyservers for fingerprints as Resolved.Jan 19 2023, 4:41 PM