On Thu, Jan 11, 2024 at 03:50:32PM -0800, Linus Torvalds wrote:
> > jejb@lingrow:~> gpg --list-key E76040DB76CA3D176708F9AAE742C94CEE98AC85
> > pub rsa2048 2011-09-23 [SC] [expires: 2026-03-11]
> > D5606E73C8B46271BEAD9ADF814AE47C214854D6
> > uid [ultimate] James Bottomley
> > <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
> > uid [ultimate] James Bottomley <jejb@xxxxxxxxxxxxxxxxxx>
> > uid [ultimate] James Bottomley <jejb@xxxxxxxxxx>
> > uid [ultimate] [jpeg image of size 5254]
> > uid [ultimate] James Bottomley <jejb@xxxxxxxxxxxxx>
> > uid [ultimate] James Bottomley <jejb@xxxxxxxxxxxxxxxxxxxxx>
> > sub nistp256 2018-01-23 [S] [expires: 2024-01-16]
> > sub nistp256 2018-01-23 [E] [expires: 2024-01-16]
> > sub nistp256 2023-07-20 [A] [expires: 2024-01-16]
>
> Look closer.
>
> NOWHERE there does it mention E76040D.. Nowhere.
I'm piping up just because I know how to get the output you want, not because
I hold any opinions on GnuPG (I do, but they aren't relevant here). :)
Add the following to your ~/.gnupg/gpg.conf:
keyid-format long
After that the output should look like this:
$ gpg --list-key E76040DB76CA3D176708F9AAE742C94CEE98AC85
pub rsa2048/814AE47C214854D6 2011-09-23 [SC] [expires: 2026-03-11]
D5606E73C8B46271BEAD9ADF814AE47C214854D6
uid [ full ] James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
uid [ full ] James Bottomley <jejb@xxxxxxxxxx>
uid [ full ] James Bottomley <jejb@xxxxxxxxxxxxxxxxxx>
uid [ never ] [jpeg image of size 5254]
uid [ full ] James Bottomley <jejb@xxxxxxxxxxxxx>
sub nistp256/E742C94CEE98AC85 2018-01-23 [S] [expires: 2024-01-16]
sub nistp256/3E01E40786F26FB8 2018-01-23 [E] [expires: 2024-01-16]
sub nistp256/920E9CA6AA3F170D 2023-07-20 [A] [expires: 2024-01-16]
Note, that keyids are truncated from the right, as opposed to git commits.
> And the above is actually being *generous* to gpg. The reality is even
> worse. Try this:
>
> gpg --list-key 37AAA9562C5CBD0C
>
> and notice how it doesn't even list the subkey I asked about. Not even
> with '--with-subkey-fingerprint'.
Again, just because I happen to know the right incantation and it may come up
in a search for someone:
$ gpg --list-options show-unusable-subkeys --list-key 37AAA9562C5CBD0C
You can add it to your .gnupg/gpg.conf as well:
list-options show-unusable-subkeys
-K
