subkey handling? #2

New issue

Closed

opened 2023-03-03 12:40:24 +01:00 by mf · 0 comments

mf commented

2023-03-03 12:40:24 +01:00

Owner

gpg --show-keys --no-secmem-warning --with-colons foerste@schlittermann.de/93632C800F51DA21.asc 
pub:-:4096:1:93632C800F51DA21:1393919690:1720599710::-:::scESC::::::23::0:
fpr:::::::::590C5DF1C3B8D072555B54F593632C800F51DA21:
uid:-::::1676362910::CC7E97078121891D25D2DB344C457CCC16317913::Matthias Förste <foerste@schlittermann.de>::::::::::0:
sub:-:4096:1:29B9349CF373C4D7:1393919690:1679039199:::::e::::::23:
fpr:::::::::9DBB0D9A277ECD6FC2D9467E29B9349CF373C4D7

date -d @1679039199
Fri 17 Mar 2023 08:46:39 AM CET

/usr/lib/nagios/plugins/ius/check_gpgexpire -c 32 /srv/www/hosts/www.schlittermann.de/htdocs/keys|grep -Fi foerste
/srv/www/hosts/www.schlittermann.de/htdocs/keys/gpg/foerste@schlittermann.de/93632C800F51DA21.asc expires in 494 days

I forgot to extend the expiry of the subkey used for encryption, but the check still reports OK

On a side note: supplying the command --show-keys to gpg would be the more 'correct' way to suppress the warning gpg: WARNING: no command supplied. Trying to guess what you mean ... inside the fh_gpg_colons funtion, and also give more information about the key (the usage type for instance).

``` gpg --show-keys --no-secmem-warning --with-colons foerste@schlittermann.de/93632C800F51DA21.asc pub:-:4096:1:93632C800F51DA21:1393919690:1720599710::-:::scESC::::::23::0: fpr:::::::::590C5DF1C3B8D072555B54F593632C800F51DA21: uid:-::::1676362910::CC7E97078121891D25D2DB344C457CCC16317913::Matthias Förste <foerste@schlittermann.de>::::::::::0: sub:-:4096:1:29B9349CF373C4D7:1393919690:1679039199:::::e::::::23: fpr:::::::::9DBB0D9A277ECD6FC2D9467E29B9349CF373C4D7 ``` ``` date -d @1679039199 Fri 17 Mar 2023 08:46:39 AM CET ``` ``` /usr/lib/nagios/plugins/ius/check_gpgexpire -c 32 /srv/www/hosts/www.schlittermann.de/htdocs/keys|grep -Fi foerste /srv/www/hosts/www.schlittermann.de/htdocs/keys/gpg/foerste@schlittermann.de/93632C800F51DA21.asc expires in 494 days ``` I forgot to extend the expiry of the subkey used for encryption, but the check still reports OK On a side note: supplying the command `--show-keys` to gpg would be the more 'correct' way to suppress the warning `gpg: WARNING: no command supplied. Trying to guess what you mean ...` inside the `fh_gpg_colons` funtion, and also give more information about the key (the usage type for instance).