Yes, that patch is not a great solution. Ideally there would be an interactive choice in the gpg CLI between encrypting/signing subkey during the add-existing-subkey operation.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Aug 18 2022
Aug 18 2022
Apr 12 2022
Apr 12 2022
For anyone stumbling across this issue I created a docker image containing gpg with the patch above applied: https://github.com/smlx/gnupg-piv-agent
Oct 11 2021
Oct 11 2021
Note that I'm referring to file based keys, not card based.
I tested this on 2.3, and it doesn't seem to be fixed. When adding an existing ECDSA subkey I don't get the option to choose whether to make it a signing or encrypting subkey. Instead it only allows me to choose an encrypting subkey.
Aug 14 2021
Aug 14 2021
smlx renamed T5555: Cannot add existing ECDSA key as a signing subkey from Cannot use existing key to add ECDSA signing subkey to Cannot add existing ECDSA key as a signing subkey.