即使 --list-secret-keys 和 --sign 按预期工作,GPG --edit-key 也会失败并显示“无密钥”

即使 --list-secret-keys 和 --sign 按预期工作,GPG --edit-key 也会失败并显示“无密钥”

我想刷新 UID 并推迟到期日期,但我得到了。

gpg --edit-key [email protected] 
gpg (GnuPG) 2.1.15; Copyright (C) 2016 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Secret key is available.

pub  rsa4096/0x03FFE7DE7AEFDD3B
     created: 2014-09-21  expires: 2017-09-20  usage: SC  
     trust: ultimate      validity: ultimate
ssb  rsa4096/0x612502E7B5475FF9
     created: 2014-09-21  expires: 2017-09-20  usage: E   
ssb  rsa4096/0x6777F12E17534B8E
     created: 2014-09-21  expires: 2017-09-20  usage: S   
[ultimate] (1). Nathan DWEK <[email protected]>
[ultimate] (2)  Nathan DWEK <[email protected]>

gpg> expire
Changing expiration time for the primary key.
gpg: WARNING: no user ID has been marked as primary.  This command may
              cause a different user ID to become the assumed primary.
Please specify how long the key should be valid.
         0 = key does not expire
      <n>  = key expires in n days
      <n>w = key expires in n weeks
      <n>m = key expires in n months
      <n>y = key expires in n years
Key is valid for? (0) 2y
Key expires at jeu 19 sep 2019 12:19:31 CEST
Is this correct? (y/N) y
gpg: signing failed: No secret key
gpg: make_keysig_packet failed: No secret key

然而:

gpg --list-secret-keys 
/home/nathdwek/.gnupg/pubring.gpg
---------------------------------
sec#  rsa4096/0x03FFE7DE7AEFDD3B 2014-09-21 [SC] [expires: 2017-09-20]
      Key fingerprint = 1A12 B5ED F67A 947C B616  6FCC 03FF E7DE 7AEF DD3B
uid                   [ultimate] Nathan DWEK <[email protected]>
uid                   [ultimate] Nathan DWEK <[email protected]>
ssb   rsa4096/0x612502E7B5475FF9 2014-09-21 [E] [expires: 2017-09-20]
ssb   rsa4096/0x6777F12E17534B8E 2014-09-21 [S] [expires: 2017-09-20]

签名和使用pass,一个基于gpg的密码管理器已经完美工作了很长时间。我使用的是带有 cinnamon 的 Ubuntu 17.04。

答案1

我使用离线主密钥并使用子密钥进行签名和解密。这是由#我的主密钥前面显示的。

这就是为什么我唯一无法执行的操作是密钥签名操作。

相关内容