Comments (6)
I might consider adding this, though I can't think of any threat model where allowing automated, likely passwordless, certification of other keys increases security in some substantial manner. Actually, the only "useful" thing (from some peoples' views) that I could foresee being done with this feature would be to use it to spam/poison the Web of Trust with a bunch of fake keys which cross-certify each other.
How were you thinking of using it?
from python-gnupg.
May I just ask for clarity: Is it possible, right now, to sign a key with python-gnupg?
from python-gnupg.
@isislovecruft we'll need that in @leapcode to roll new keys, when you generate a new key you want to sign it with the previous one. I'm having a look to the code to propose an implementation of key signature for python-gnupg.
@muelli as far as I digg in the code it's not implemented anywhere.
from python-gnupg.
@meskio I'll take patches for this. It's going to be pretty hard to do. By default, --sign-key
drops you into an interactive prompt asking Really sign all user IDs? (y/N)
and afterwards, regardless of your answer, drops you off in the gpg>
interactive prompt (where you have to type save
and quit
and so forth). By default (because it's meant to be automateable) python-gnupg uses --no-tty
to disable all interactivity, and trying to use --sign-key
with --no-tty
will produce an error message saying gpg: Sorry, no terminal at all requested - can't get input
. Further, gpg won't listen to you if you try to use anything like --no-tty --passphrase-fd 0 --sign-key
or any of the other passphrase input options. Not to deter anyone, because I'll take all the help I can get, but this is not going to be a fun set of patches, I'm afraid. :/
from python-gnupg.
After some tests I see you are right, this is not going to be easy. Right now I have other priorities and I put that on the back log. I'll come back at some point to try to implemented again.
Thanks for the info.
from python-gnupg.
On gnupg-users, Werner mentions that with GnuPG 2.1 it should be easier to implement.
http://www.gossamer-threads.com/lists/gnupg/users/68547
https://gnupg.org/faq/whats-new-in-2.1.html#quickgen
from python-gnupg.
Related Issues (20)
- Silence log message generated upon import
- Version parsing from gpg on windows fails, given a '\r' line end output instead of '\n' from gpg.exe
- Fail to install on Fedora 30 - no folder /usr/lib/rpm/redhat/ HOT 3
- decrypt function, passphrase arg doesn't work HOT 1
- daemon with restart crash because of _check_sane_and_get_gpg_version
- Deprecation warning due to invalid escape sequences in Python 3.7
- python-gnupg on 3.7 HOT 1
- Question: Understanding recipients parameters for encrypting files HOT 1
- keytocard function?
- TypeError: _encrypt() got multiple values for argument 'recipients' HOT 1
- gnupg path in Glue
- encrypt_file not work on Linux and Unix
- international characters filename - not encrypting
- Unable to import private key with passpharse HOT 4
- encrypt() with recipient's email address (instead of key fingerprint)? HOT 3
- Sign function incorrectly strips one trailing CRLF
- How to read in a private key and return its public key?
- How to export minimal key?
- self.status is None:
- self.status = '\n'.join([self.status, "key considered"]) - TypeError: sequence item 0: expected str instance, NoneType found
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from python-gnupg.