Home → Stable →

GPG Keychain: GPG Keychain not indicating expired subkeys

• Edit

poc

14 Jul, 2018 01:52 PM

I recently stumbled over a problem that I can’t click the lock button in Apple Mail in a new mail to a recipient for unknown reasons. The key entry looked perfectly valid in the GPG Keychain key list view. I needed to run a gpg —list-keys to get a clue what was wrong: The subkey was expired. After that, I could verify this condition in GPG Keychain.

Expected
Some indication in the GPG Keychain list view that the key isn’t valid. Maybe correction of the tooltip text for the lock icon stating the true error condition instead of „no pubkey available“.

Additional info
Using Current GPG Tools on Mac OS 10.13.5.

Thanks for GPG Suite for the Mac!

macOS                   10.13.5     17F77
GPG Suite               2018.3      2223    (8d0c266)
GPGMail                 3.0b7       1319    (c2d0df0a)
GPG Keychain            1.4.4       1460    (9010342)
GPGServices             1.11.4      1013    (0b04f6c)
MacGPG                  2.2.8       916     (0ed4a99)
GPG Suite Preferences   2.1.2       997     (1a09bc7)
Libmacgpg               0.8.5       863     (0707962)
pinentry                0.9.7.1     9       (db18340)

1. Support Staff 1 Posted by Steve on 26 Jul, 2018 02:27 PM

   

   Hi Poc,

   glad you were already able to figure out what was wrong with your key. We are currently working on a mechanism to inform users about keys / subkeys about to or already expired and provide easy steps to extend a key / subkey.

   Thanks for taking the time to file this report.

   It will still be a while until this is ready for release but we are very aware of this problem and are actively working on it.

   Best,
   steve

   • Edit

2. Support Staff 2 Posted by Steve on 17 Nov, 2018 06:22 PM

   

   Just a quick update to note that this has been fixed in 2018.4:
   https://gpgtools.org/releases/gpgsuite/release-notes.html

   • Edit

3. Steve closed this discussion on 17 Nov, 2018 06:22 PM.