trust not calculated correct

Roland Rosenfeld roland@spinnaker.de
Sun, 24 Oct 1999 23:26:30 +0200


--SLDf9lqlvOQaIe6s
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable

I have the following problem with GnuPG 1.0:

One of the keys in my pubring seems not to be integrated into the
web-of-trust, which means that the "calculated trust" is set to "q"
instead of "f".  Look at this:

$ gpg --edit-key DB089309

pub  1127R/DB089309  created: 1997-03-17 expires: never      trust: f/q
(1)  Lutz Donnerhacke <lutz@iks-jena.de>

Command> check
uid  Lutz Donnerhacke <lutz@iks-jena.de>
sig!       39F37F5D 1997-03-17   Lutz Donnerhacke <Lutz.Donnerhacke@Jena.
sig!       593238E1 1997-12-10   Thomas Roessler <roessler@guug.de>
sig!       DB089309 1997-03-17   [self-signature]
21 signatures not checked due to missing keys

As you can see, DB089309 is signed by two keys (39F37F5D, 593238E1),
which are both fully trusted:

$ gpg --edit-key 39F37F5D

pub  2048R/39F37F5D  created: 1996-04-25 expires: never      trust: f/f
(1)  Lutz Donnerhacke <Lutz.Donnerhacke@Jena.Thur.De>
(2)  Lutz Donnerhacke <lutz@dana.de>

$ gpg --edit-key 593238E1

pub  1280R/593238E1  created: 1996-01-19 expires: never      trust: f/f
(1)  Thomas Roessler <roessler@guug.de>
(2)  Thomas Roessler <Thomas.Roessler@Sobolev.Rhein.DE>

So If I don't miss anything, this should imply that the computed trust
of DB089309 should also be "f" instead of "q".  I didn't configure
completes-needed, marginals-needed and max-cert-depth, so two fully
trusted signatures should be more than enough to mark the key fully
trusted.

gpg --update-trustdb and gpg --check-trustdb don't change anything.

gpg --list-trust-path DB089309 doesn't display any path.

I tried the following sequence of commands:

gpg --export-ownertrust > ownertrust.export
mv trustdb.gpg trustdb.gpg.old
gpg --import-ownertrust < ownertrust.export
gpg --update-trustdb
gpg --check-trustdb

but this also didn't fix this key (I noted a similar problem with
39F37F5D (see above), and it solved my problems with 39F37F5D, but
with DB089309 it doesn't work).

Any idea what's wrong here?


I use GnuPG 1.0 with rsa and idea modules on a Debian system
Linux spinnaker 2.2.13 #1 Mit Okt 20 18:48:12 CEST 1999 i586 unknown
with libc6 2.1.2.

Ciao

        Roland

--=20
 * roland@spinnaker.de * http://www.spinnaker.de/ *

--SLDf9lqlvOQaIe6s
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.0 (GNU/Linux)

iD8DBQE4E3mFO7/Pd72LBQ0RAtrnAJ94OPasnb5lwy9H5uJ6DugqjLUT/wCgkjtM
mJV6Xsuor/8wHCxgpc+gY5Y=
=WKwQ
-----END PGP SIGNATURE-----

--SLDf9lqlvOQaIe6s--