Page MenuHome GnuPG
Create Task
Maniphest T7146

gpg: Add import option "no-seckeys"
Testing, NormalPublic
Actions

Description

When importing keys that were retrieved via WKD (e.g. manually downloaded or by some other program like Kleopatra) only public keys should be imported. As far as I can see, there is no way to set the internal IMPORT_NO_SECKEY keyserver option flag from the command line with the --import-options option (or some other option).

Revisions and Commits

rG GnuPG
rG4c65dfeb2878 gpg: Rename recently added import option no-seckeys to only-pubkeys.
rG489b9c6ebb50 gpg: Rename recently added import option no-seckeys to only-pubkeys.
rGe208ccc66c34 gpg: Rename recently added import option no-seckeys to only-pubkeys.
rG7788aba7d864 gpg: Add --import-option "no-seckeys".
rGdb556fcb7ada gpg: Add --import-option "no-seckeys".
rG8e691efb0588 gpg: Add --import-option "no-seckeys".

Related Objects

Event Timeline

ikloecker created this task.Mon, Jun 10, 4:36 PM
• werner added a commit: rG8e691efb0588: gpg: Add --import-option "no-seckeys"..Tue, Jun 11, 3:51 PM
• werner added a commit: rGdb556fcb7ada: gpg: Add --import-option "no-seckeys"..Tue, Jun 11, 3:53 PM
• werner added a commit: rG7788aba7d864: gpg: Add --import-option "no-seckeys"..Tue, Jun 11, 3:55 PM
• werner changed the task status from Open to Testing.Tue, Jun 11, 3:56 PM
• werner claimed this task.
• werner moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.
• werner added a subscriber: • werner.

Done for all branches,

• werner triaged this task as Normal priority.Tue, Jun 11, 3:57 PM
ikloecker mentioned this in T7150: Kleopatra: Import only public keys from WKD.Tue, Jun 11, 4:31 PM
ikloecker changed the task status from Testing to Open.Wed, Jun 12, 10:28 AM

This doesn't seem to work. I get

$ gpg --version
gpg (GnuPG) 2.4.6-beta4
libgcrypt 1.11.0

$ gpg --verbose --import-options no-seckeys ted.tester-pub.asc
gpg: unknown option 'no-seckeys'
gpg: invalid import options

I suspect that this is caused by the special handling of the "no-" prefix in parse_options.

I verified this hypothesis by renaming the option to "only-pubkeys". This makes the option work for me.

ikloecker mentioned this in T7152: gpgme: Support import options.Wed, Jun 12, 11:02 AM
• werner added a comment.Mon, Jun 24, 11:51 AM

Okay. The option has been renamed to "only-pubkeys"

• werner added a commit: rGe208ccc66c34: gpg: Rename recently added import option no-seckeys to only-pubkeys..Mon, Jun 24, 11:55 AM
• werner added a commit: rG4c65dfeb2878: gpg: Rename recently added import option no-seckeys to only-pubkeys..
• werner added a commit: rG489b9c6ebb50: gpg: Rename recently added import option no-seckeys to only-pubkeys..
ikloecker changed the task status from Open to Testing.Mon, Jun 24, 3:23 PM

The import option "only-pubkeys" works for me/Kleopatra.

• werner mentioned this in T7189: Release GnuPG 2.5.0.Fri, Jul 5, 2:42 PM