View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0000089 | Main CAcert Website | GPG/PGP | public | 2005-11-22 23:28 | 2012-12-20 08:24 |
| Reporter | duane | Assigned To | Sourcerer | ||
| Priority | normal | Severity | feature | Reproducibility | always |
| Status | needs work | Resolution | open | ||
| Summary | 0000089: GPG Revokation Escrow Service | ||||
| Description | We currently have the ability to revoke X.509 certificates either by administrative request or user request and due to the decentralised nature of GPG/PGP keys there are a lot floating about because people loose their keys and in turn unable to generate revokation notices. It's been suggested to allow users to tag their keys to be revoked by our key and then if they loose their private key or forget the password they upload their public key and we issue them with a revoked certificate. | ||||
| Tags | No tags attached. | ||||
| Reviewed by | |||||
| Test Instructions | |||||
| related to | 0000008 | needs review | Sourcerer | Normalization of special characters when comparing names |
| related to | 0000138 | needs work | Sourcerer | Wrong expiration date |
| related to | 0000251 | needs work | Sourcerer | PGP Certifikat revoken / löschen |
| related to | 0000318 | needs work | Sourcerer | OpenPGP CRL |
| related to | 0000525 | new | Point system inconsistency: GPG keys are treated different from x509 certs regarding validity | |
| related to | 0000669 | needs work | PGP System fails to update keys it mistakenly things have expired... sorta | |
| related to | 0000721 | new | No way to revoke sigs on a OpenPGP key | |
| related to | 0000724 | needs feedback | NEOatNHNG | Old low sec OpenPGP Key (0x9E2BD1F2) should expire sooner |
| related to | 0000729 | new | Multiple GPG Keys | |
| related to | 0000778 | closed | Sourcerer | GPG/PGP-Key upload not possible |
| related to | 0000794 | closed | egal | visibility over certificates for sysadm in account administration |
| related to | 0000811 | new | GPG key parsing incorrectly detects multiple e-mail addresses per UID | |
| related to | 0000922 | closed | NEOatNHNG | CAcert application code problem causing missing "certificate about to expire" messages |
| related to | 0000929 | closed | BenBE | GPG/PGP menu items expand the wrong root |
| related to | 0000992 | closed | NEOatNHNG | Problem with diacritic characters while adding PGP/GPG public key |
| related to | 0001079 | needs work | GPG key can not be revoked | |
| related to | 0000075 | closed | Sourcerer | GPG Signature revocation system needed |
|
|
From gpg manpage: addrevoker [sensitive] Add a designated revoker. This takes one optional argument: "sensitive". If a designated revoker is marked as sensitive, it will not be exported by default (see export-options). --desig-revoke name Generate a designated revocation certificate for a key. This allows a user (with the permission of the keyholder) to revoke someone else's key. |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2005-11-22 23:28 | duane | New Issue | |
| 2005-11-22 23:29 | duane | Relationship added | related to 0000075 |
| 2005-11-22 23:34 | evaldo | Note Added: 0000036 | |
| 2006-08-16 19:32 | duane | Status | new => needs work |
| 2006-08-16 19:32 | duane | Assigned To | => Sourcerer |
| 2012-12-20 07:25 | Werner Dworak | Relationship added | related to 0000008 |
| 2012-12-20 07:26 | Werner Dworak | Relationship added | related to 0000138 |
| 2012-12-20 07:27 | Werner Dworak | Relationship added | related to 0000251 |
| 2012-12-20 07:28 | Werner Dworak | Relationship added | related to 0000318 |
| 2012-12-20 07:32 | Werner Dworak | Relationship added | related to 0000525 |
| 2012-12-20 07:48 | Werner Dworak | Relationship added | related to 0000669 |
| 2012-12-20 07:50 | Werner Dworak | Relationship added | related to 0000721 |
| 2012-12-20 07:51 | Werner Dworak | Relationship added | related to 0000724 |
| 2012-12-20 07:52 | Werner Dworak | Relationship added | related to 0000729 |
| 2012-12-20 07:52 | Werner Dworak | Relationship added | related to 0000778 |
| 2012-12-20 07:58 | Werner Dworak | Relationship added | related to 0000794 |
| 2012-12-20 07:59 | Werner Dworak | Relationship added | related to 0000811 |
| 2012-12-20 08:02 | Werner Dworak | Relationship added | related to 0000841 |
| 2012-12-20 08:03 | Werner Dworak | Relationship deleted | related to 0000841 |
| 2012-12-20 08:19 | Werner Dworak | Relationship added | related to 0000922 |
| 2012-12-20 08:20 | Werner Dworak | Relationship added | related to 0000929 |
| 2012-12-20 08:23 | Werner Dworak | Relationship added | related to 0000992 |
| 2012-12-20 08:24 | Werner Dworak | Relationship added | related to 0001079 |
