comment to bug about existing invalid authentication keys.

diff --git a/website/bugs/authorized_keys-options.mdwn b/website/bugs/authorized_keys-options.mdwn
index a066318e8c7d8501188a178f16bbe6106c265acc..4e7a8386c856183be6cffa7e1af3a42f7b422439 100644 (file)
--- a/website/bugs/authorized_keys-options.mdwn
+++ b/website/bugs/authorized_keys-options.mdwn
@@ -1,7 +1,5 @@
 [[meta title="Monkeysphere support for options in authorized_keys"]]
 
-# Monkeysphere support for options within `authorized_keys` #
-
 OpenSSH [allows users to control the capabilities granted to remote
 key-based
 logins](http://www.hackinglinuxexposed.com/articles/20030109.html) by

diff --git a/website/bugs/monkeysphere-gen-subkey-treats-revoked-auth-subkey-as-valid.mdwn b/website/bugs/monkeysphere-gen-subkey-treats-revoked-auth-subkey-as-valid.mdwn
index 8181437b828e6b69b496baa7a969946a7f3a40c2..3c7e8043c145ae479efb0071ca7f7b0a716c0b6b 100644 (file)
--- a/website/bugs/monkeysphere-gen-subkey-treats-revoked-auth-subkey-as-valid.mdwn
+++ b/website/bugs/monkeysphere-gen-subkey-treats-revoked-auth-subkey-as-valid.mdwn
@@ -19,3 +19,19 @@ revoked, so probably monkeysphere needs to be looking at gpg's
 computed validity from the public keyring instead of the secret
 keyring to be able to get the "r" flag from field 2, in addition to
 the "e" flag from field 12.
+
+---
+
+So the problem is that there is no field 2 for secret keys.  From
+/usr/share/doc/gnupg/DETAILS.gz:
+
+      2. Field:  A letter describing the calculated trust. This is a single
+                letter, but be prepared that additional information may follow
+                in some future versions. (not used for secret keys)
+
+Why would secret keys not have this field?  They have validity too,
+right?  This doesn't make any sense.  I verify that indeed there is no
+output in field 2 for secret keys.  I would say this is a bug in gpg,
+but it's clearly done on purpose.  Any ideas?
+
+-- jrollins