Server rejects OpenPGP certificates without encryption subkey
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 35/100
- Issue type
- Bug
- Clarity
- Mostly clear
- Activity status
- Stale
- Tech stack
- javascript
- Domain
- cryptography, security
Research direction
Start by tracing the key validation path used by both the HKP upload and web form, then reproduce the 400 response with a signing-only OpenPGP certificate. Check how the validator handles certificates without encryption subkeys and revocation certificates. Done means valid signing-only certificates are accepted through both upload paths without weakening other validation.
Written by the indexing model from the issue text.
Description
Trying to add my code signing key via hkp fails with 400 bad request, and uploading via the web form reveals:
Error! Invalid PGP key. No valid encryption key found: Could not find valid encryption key packet in key 31855247603831fd
I think this is rather unfortunate, as having a separate OpenPGP certificate for code signing is a way to separate concerns, i.e. no signature over a git object can ever be mistaken for a signature made by my main certificate.
Other useful OpenPGP certificates without encryption subkeys are certificate revocations (note that the same composition is useful for v4 certificate revocations: the bare signature lacks context, pairing it with the primary key provides that context).
- Dominant language
- JavaScript
- Stars
- 481
- Forks
- 80
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from mailvelope/keyserver
-
support for PQC Open
Difficulty 4/5 3-5 days Newbie friendliness 45/100
mailvelope/keyserver#155 · 1 comment · 1 reaction ·
-
Difficulty 3/5 1-2 days Newbie friendliness 42/100
mailvelope/keyserver#145 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 45/100
mailvelope/keyserver#144 · 2 comments ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 55/100
mailvelope/keyserver#143 ·
-
Web key directory Open
Difficulty 4/5 3-5 days Newbie friendliness 38/100
mailvelope/keyserver#121 · 35 comments · 4 reactions ·
All issues in mailvelope/keyserver
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
HarperFast/skills#96 ·
-
[Block] Latest Posts [Type] Bug
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
Automattic/studio#4908 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
sugarlabs/musicblocks#8847 ·