Home → Stable →

Is there a way to undo a revoke certificate import?

• Edit

marco scialino

30 May, 2013 09:19 PM

I have just followed the instructions to install gpgmail on my mac and generate the keys (http://support.gpgtools.org/kb/how-to/first-steps-where-do-i-start-where-do-i-begin).

I successfully completed the installation , generated the keys and uploaded my public key to key servers.

I then decided to generate the revoke certificate for later use as suggested by the instructions.

When moving the generated file to a safe place I inadvertently double-clicked on the file instead that single clicking to select it for moving.
The result was a local unconfirmed import of the revoke certificate and now I cannot use my brand-new keys any more to sign my emails.

Is there a way to "un-applying" the revoke certificate local import?

I looked at all GPG Key Chain Access menus, panels and command line tools options, but found no hints.

Thank you,

Marco

1. Support Staff 1 Posted by Steve on 12 Jun, 2013 03:58 PM

   

   Hi Marco,

   first off: you are absolutely right about that warning dialogue.

   We've a ticket for this now. Please subscribe to the ticket if you want to be notified of changes being made in regards to this issue:

   https://gpgtools.lighthouseapp.com/projects/65684/tickets/165

   Do you happen to have a backup of your keys? In that case delete the revoked keys and import your keys from the backup.

   Undoing the revocation is not possible. You might want to get in touch with the gnupg.org users mailing list. Maybe someone there knows a solution unknown to us.

   Since this is really a problem and I understand it's annoying we've created the ticket from above and also created a KB-articleBackup your keys which is also linked in the "Generate a key" article. We hope to omit trouble like this in the future.

   If all fails you will have to go through the process of creating new keys.

   Best, steve

   • Edit

2. 2 Posted by marco scialino on 13 Jun, 2013 07:22 AM

   

   Thank you Steve for your response.

   I had no backup for my keys, I will look at gnupg.org mailing list for a solution as you suggest.
   However as I had just started using gpgmail, it will not be a great deal restarting from scratch.
   I am happy I spotted a problem, helping you to improve your work.

   Thanks, marco

   • Edit

3. Support Staff 3 Posted by Steve on 15 Jun, 2013 10:19 AM

   

   OK, sorry you had to run into this.

   Feel free to update this discussion should you find out anything new.

   I'll close it for overview purposes. We have the ticket for that once implemented should prevent this in the future from happening.

   You can always open a new discussion should you run into further trouble or need help.

   Best :)
   steve

   • Edit

4. Steve closed this discussion on 15 Jun, 2013 10:19 AM.

5. Support Staff 4 Posted by Steve on 07 Feb, 2014 05:00 PM

   

   Fixed in latest nightly. When now importing a revocation certificate, the user will see a message informing about the consequences and will have to confirm the import first before any damage can be done.

   • Edit

6. Steve closed this discussion on 07 Feb, 2014 05:00 PM.

7. Marco Scialino re-opened this discussion on 08 Feb, 2014 02:45 PM

8. 5 Posted by Marco Scialino on 08 Feb, 2014 02:45 PM

   

   Good job!

   Thank you for notifying me and for your work.

   Marco

   On 07/feb/2014, at 18:00, Steve <[email blocked]> wrote:

   • signature.asc 496 Bytes
   • Edit

9. Support Staff 6 Posted by Steve on 10 Feb, 2014 10:41 AM

   

   Yes this was a very important fix. Glad we were able to find the time to get it done :)

   • Edit

10. Steve closed this discussion on 10 Feb, 2014 10:41 AM.