Hello. It will be noted at the beginning of the output resulting from the command below, whatever the option selected making possible the selection of capacities among a set of capacities, that for each type of key selected, the actions said to be possible and those said to be authorized are announced.
Illustration; output filtered:
# gpg --expert --full-generate-key Please select what kind of key you want: (11) ECC (set your own capabilities) Your selection? 11 Possible actions for this ECC key: Sign Certify Authenticate Current allowed actions: Sign Certify (S) Toggle the sign capability (A) Toggle the authenticate capability (Q) Finished
It will then be unambiguously understood:
- by 'Possible actions', the explicit meaning of actions technically achievable, therefore supported by the OpenPGP standard.
- by 'Current allowed actions', the implicit meaning of currently achievable capabilities.
- options presented for selection directly after the line 'Current allowed actions: <capabilities>' are representative of the currently achievable capabilities.
It will be observed the following inconsistencies:
- 'Certify', which is a representative of a currently achievable capability, is however not presented for selection. The '(C) Toggle the certify capability' option is missing isn't it?
- The '(A) Toggle the authenticate capability' option, which is presented for selection, is however not a representative of a currently achievable capability.
What could have led to this state?