Keyserver refresh period after gpg --send-keys
Jason Harris
jharris at widomaker.com
Mon Feb 19 17:51:02 CET 2007
On Sun, Feb 18, 2007 at 11:31:55PM -0500, David Shaw wrote:
> On Sun, Feb 18, 2007 at 11:11:37PM +0100, Bruno Costacurta wrote:
> > I updated the expiration (via gpg --edit-key using expire option) of my key
> > and (re)sended it to a keyserver (via gpg --send-keys [my key id]) to
> > keyserver subkeys.pgp.net.
> > However key is still not updated after few hours.
> > What are normal delays ?
Keys do get temporarily "trapped" on the SKS keyserver network until
keyserver.kjsl.com copies them over to the rest of the planet.
BTW, your subkey isn't currently usable:
sub 2048g/0CC897B5 2006-06-11 [subkey]
Key fingerprint = CCE0 5315 0022 9460 0337 6C6F 4253 1C9A 0CC8 97B5
sig 0x18 2E604D51 2006-06-11 [skey EXPIRED 2006-12-08] [keybind, hash: type 2, e0 0f]
sig 0x18 2E604D51 2006-06-11 [skey EXPIRED 2006-12-08] [keybind, hash: type 2, e0 0f]
> There is not an easy answer to that question. subkeys.pgp.net is not
> actually a keyserver, but rather a collection of (at the moment) 5
> different keyservers. When you use it, you get one server from the
> pool in a round-robin fashion. Generally speaking, any given
> keyserver in the pool that you update reflects the update immediately,
> but frequently people update one keyserver in the pool, but then check
> for the update from another server in the pool which hasn't gotten it
> yet.
NB: I think if GPG printed the IP address of the keyserver it used, it
could end some of this confusion.
Specifically, these were in a batch update from SKS to onak/OpenPKSD/pks/
etc. (all times are TZ=UTC):
2007-02-06 23:02:08.290952260 display_new_sig: new sig 28 by 2E604D51 added to 2E604D51 Bruno Costacurta <bruno at costac...
2007-02-06 23:02:08.291023778 display_new_sig: new subkey sig by 2E604D51 added to 2E604D51
these were first seen from pgp.nic.ad.jp:
2007-02-16 13:41:00.597122207 display_new_sig: new sig 1 by 2E604D51 added to 2E604D51 Bruno Costacurta <bruno at costac...
2007-02-16 13:41:00.597182829 display_new_sig: new sig 2 by 2E604D51 added to 2E604D51 pubmb02 <pubmb02 at skynet.be>
and these were in another batch update:
2007-02-18 23:02:27.870255691 display_new_sig: new sig 71 by 2E604D51 added to 2E604D51 Bruno Costacurta <bruno at costac...
2007-02-18 23:02:27.870319946 display_new_sig: new sig 72 by 2E604D51 added to 2E604D51 pubmb02 <pubmb02 at skynet.be>
--
Jason Harris | NIC: JH329, PGP: This _is_ PGP-signed, isn't it?
jharris at widomaker.com _|_ web: http://keyserver.kjsl.com/~jharris/
Got photons? (TM), (C) 2004
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 313 bytes
Desc: not available
Url : /pipermail/attachments/20070219/0ef23c22/attachment.pgp
More information about the Gnupg-users
mailing list