[cks-devl] Re: Key server question

[V Alex Brennen]

On Sat, 4 May 2002, Loic Dachary wrote:

Hello Loic,


>       When a key expires, one can update the expiration date. When the
> key is uploaded to the server *after* the expiration date, the expiration
> date is not changed. At least this is what happens on keyring.debian.org.
> 
>       I'm wondering if this feature is needed for security reasons
> or is it just a bug ? When importing keys using GnuPG alone
> (--import), updating the expiration date is not an issue at all,
> that's why I'm confused.

This is just incomplete code on the part of the keyserver running 
at keyring.debian.org.  I also still need to do some work on the
key merger code in CKS, but it's farther along that the code in
the Horowitz keyserver that I believe keyring.debian.org is 
running.

There's no security reason not to allow expiration date updates 
because the secret key is required in order to update the 
expiration date on a public key or public subkey.

> P.S. I hope you live a happy life on savannah.gnu.org. Note that bug
> tracking was recently activated. We'll make an announcement shortly.

Thank you. Savannah has been excellent. I'm glad to hear that bug 
tracking will soon be available.


        - VAB
---
V. Alex Brennen
Senior Systems Engineer
IBM Certified Specialist
e-TechServices.com
IBM Business Partner
Bus: 352.246.8553
Fax: 770.216.1877
address@hidden
http://www.e-techservices.com/people/vab/