unknown critical bit

ilf ilf at zeromail.org
Sun Apr 2 15:53:13 CEST 2017


With current GnuPG, I get an error with a specific key:

% gpg --version
gpg (GnuPG) 2.1.19
libgcrypt 1.7.6
<snip>

% mkdir test; cd test # new empty GnuPG homedir

% gpg --homedir=. --recv 631EFC0642A8D5D22C52FBA0E62E990F36377134
gpg: keybox '/home/user/test/pubring.kbx' created
gpg: assuming bad signature from key E62E990F36377134 due to an unknown critical bit
gpg: assuming bad signature from key E62E990F36377134 due to an unknown critical bit
gpg: /home/user/test/trustdb.gpg: trustdb created
gpg: key E62E990F36377134: public key "Dan Blah Meredith (This is my current primary key. This replaces my old key ID 1024D/0x9C1BDFB4.)" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1

% gpg --homedir=. --recv 631EFC0642A8D5D22C52FBA0E62E990F36377134
gpg: WARNING: unsafe permissions on homedir '/home/user/bar'
gpg: assuming bad signature from key E62E990F36377134 due to an unknown critical bit
gpg: assuming bad signature from key E62E990F36377134 due to an unknown critical bit
gpg: key E62E990F36377134: "Dan Blah Meredith (This is my current primary key. This replaces my old key ID 1024D/0x9C1BDFB4.)" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

% gpg --export-options export-minimal --export 631EFC0642A8D5D22C52FBA0E62E990F36377134 | pgpdump | grep critical | sort | uniq -c
     10         Hashed Sub: features(sub 30)(critical)(1 bytes)
     11         Hashed Sub: key expiration time(sub 9)(critical)(4 bytes)
     11         Hashed Sub: key flags(sub 27)(critical)(1 bytes)
     11         Hashed Sub: signature creation time(sub 2)(critical)(4 bytes)

The "critical" bit is defined in
https://tools.ietf.org/html/rfc4880#section-5.2.3.1

In GnuPG, this is caused in
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=blob;f=g10/sig-check.c;hb=refs/heads/master#l473

But both my OpenPGP *and* GnuPG skills fail me at that point.

Can someone help me understand why this is failing?

Thanks!

-- 
ilf

Über 80 Millionen Deutsche benutzen keine Konsole. Klick dich nicht weg!
		-- Eine Initiative des Bundesamtes für Tastaturbenutzung
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: </pipermail/attachments/20170402/24ddef53/attachment-0001.sig>


More information about the Gnupg-devel mailing list