github-starred/gitea
2
0
Fork 0
mirror of https://github.com/go-gitea/gitea.git synced 2026-03-13 02:57:44 -05:00
Code Issues 2.6k Packages Projects Releases 100 Wiki Activity

Expiry date of GPG key is reported wrong #3181

New Issue
Closed
opened 2025-11-02 05:03:00 -06:00 by GiteaMirror · 8 comments
GiteaMirror commented 2025-11-02 05:03:00 -06:00
Owner
Copy Link

Originally created by @tastytea on GitHub (Apr 13, 2019).

  • Gitea version (or commit ref): 1.7.6
  • Git version:
  • Operating system:
  • Database (use [x]):
    • PostgreSQL
    • MySQL
    • MSSQL
    • SQLite
  • Can you reproduce the bug at https://try.gitea.io:
    • Yes (provide example URL)
    • No
    • Not relevant
  • Log gist:

Description

I added a GPG key that expires 2020-04-05.

% LC_ALL=C gpg --list-keys 59346E0EA35C67E5
pub   rsa4096/59346E0EA35C67E5 2017-06-17 [SC] [expires: 2020-04-05]
      Key fingerprint = D5B4 C43B 48A8 79F6 3529  36E6 5934 6E0E A35C 67E5
uid                 [ultimate] tastytea <tastyteaXtastytea.de>
uid                 [ultimate] gentooXtastytea.de
sub   rsa4096/CA258ACA1C76DAA7 2017-06-17 [E] [expires: 2020-04-05]
sub   dsa3072/CFC39497F1B26E07 2018-07-16 [S] [expires: 2020-04-05]

Gitea claims that it is valid until 2022-01-23.

Screenshots

screenshot_2019-04-13T06:07:36

Originally created by @tastytea on GitHub (Apr 13, 2019). <!-- NOTE: If your issue is a security concern, please send an email to security@gitea.io instead of opening a public issue --> <!-- 1. Please speak English, this is the language all maintainers can speak and write. 2. Please ask questions or configuration/deploy problems on our Discord server (https://discord.gg/gitea) or forum (https://discourse.gitea.io). 3. Please take a moment to check that your issue doesn't already exist. 4. Please give all relevant information below for bug reports, because incomplete details will be handled as an invalid report. --> - Gitea version (or commit ref): 1.7.6 - Git version: - Operating system: - Database (use `[x]`): - [ ] PostgreSQL - [ ] MySQL - [ ] MSSQL - [ ] SQLite - Can you reproduce the bug at https://try.gitea.io: - [x] Yes (provide example URL) - [ ] No - [ ] Not relevant - Log gist: ## Description I added a [GPG key](https://tastytea.de/tastytea.asc) that expires 2020-04-05. ``` % LC_ALL=C gpg --list-keys 59346E0EA35C67E5 pub rsa4096/59346E0EA35C67E5 2017-06-17 [SC] [expires: 2020-04-05] Key fingerprint = D5B4 C43B 48A8 79F6 3529 36E6 5934 6E0E A35C 67E5 uid [ultimate] tastytea <tastyteaXtastytea.de> uid [ultimate] gentooXtastytea.de sub rsa4096/CA258ACA1C76DAA7 2017-06-17 [E] [expires: 2020-04-05] sub dsa3072/CFC39497F1B26E07 2018-07-16 [S] [expires: 2020-04-05] ``` Gitea claims that it is valid until 2022-01-23. ## Screenshots ![screenshot_2019-04-13T06:07:36](https://user-images.githubusercontent.com/3681516/56074429-92cd4a00-5db2-11e9-9ccf-888184acf7ae.png) <!-- **If this issue involves the Web Interface, please include a screenshot** -->
GiteaMirror added the type/bug label 2025-11-02 05:03:00 -06:00
GiteaMirror commented 2025-11-02 05:03:01 -06:00
Author
Owner
Copy Link

@lafriks commented on GitHub (Apr 13, 2019):

Could you provide public key so we could reproduce this?

@lafriks commented on GitHub (Apr 13, 2019): Could you provide public key so we could reproduce this?
GiteaMirror commented 2025-11-02 05:03:01 -06:00
Author
Owner
Copy Link

@tastytea commented on GitHub (Apr 13, 2019):

@lafriks https://tastytea.de/tastytea.asc

@tastytea commented on GitHub (Apr 13, 2019): @lafriks https://tastytea.de/tastytea.asc
GiteaMirror commented 2025-11-02 05:03:01 -06:00
Author
Owner
Copy Link

@sapk commented on GitHub (Apr 15, 2019):

I found a signature of a subkey that should be valid until 2022 but maybe we should have ignored them as the primary key that sign expire before.

    subpacketType:"Signature Creation Time (0x2)"
    creationTime:"Sat Apr 06 2019 18:50:56 GMT+0200 (heure d’été d’Europe centrale)"
    length:"5"
    subpacketType:"Key Expiration Time (0x9)"
    data:"0544e755"

The expire time is detected here but should be based on primary at first glance.

key details

@sapk commented on GitHub (Apr 15, 2019): I found a signature of a subkey that should be valid until 2022 but maybe we should have ignored them as the primary key that sign expire before. ``` subpacketType:"Signature Creation Time (0x2)" creationTime:"Sat Apr 06 2019 18:50:56 GMT+0200 (heure d’été d’Europe centrale)" length:"5" subpacketType:"Key Expiration Time (0x9)" data:"0544e755" ``` The expire time is detected [here](https://github.com/go-gitea/gitea/blob/master/models/gpg_key.go#L239) but should be based on primary at first glance. [key details](https://cirw.in/gpg-decoder/#-----BEGIN%20PGP%20PUBLIC%20KEY%20BLOCK-----%0A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%0AepiDVQ==%0A=VSKJ%0A-----END%20PGP%20PUBLIC%20KEY%20BLOCK-----%0A)
GiteaMirror commented 2025-11-02 05:03:01 -06:00
Author
Owner
Copy Link

@sapk commented on GitHub (Apr 15, 2019):

You seems to have re-sign your key the Sat Apr 06 2019 18:36:32 GMT+0200 for nearly 2.8 years so the date we display should be good. Maybe you re-sign this key on another computer and didn't re-import it re-sign in your other ?

Based on :

Signature Packet (0x2)

  cipherTypeByte: "137"
  length: "599"
  version: "4"
  signatureType: "Positive certification of a User ID and Public-Key packet. (0x13)"
  publicKeyAlgorithm: "RSA (Encrypt or Sign) (0x1)"
  hashAlgorithm: "SHA256 (0x8)"
  hashedDataCount: "65"
  subpackets:
    length:"2"
    subpacketType:"Key Flags (0x1b)"
    keyFlags:"certify (0x1),sign (0x2)"
    length:"5"
    subpacketType:"Key Expiration Time (0x9)"
    data:"03c39105"
    length:"5"
    subpacketType:"Preferred Symmetric Algorithms (0xb)"
    preferredSymmetricAlgorithms:"AES with 256-bit key (0x9),AES with 192-bit key (0x8),AES with 128-bit key (0x7),TripleDES (DES-EDE, 168 bit key derived from 192) (0x2)"
    length:"6"
    subpacketType:"Preferred Hash Algorithms (0x15)"
    preferredHashAlgorithms:"SHA256 (0x8),SHA384 (0x9),SHA512 (0xa),SHA224 (0xb),SHA1 (0x2)"
    length:"4"
    subpacketType:"Preferred Compression Algorithms (0x16)"
    preferredCompressionAlgorithms:"ZLIB (0x2),BZip2 (0x3),ZIP (0x1)"
    length:"2"
    subpacketType:"Features (0x1e)"
    keyFeatures:"Modification detection (0x1)"
    length:"2"
    subpacketType:"Key Server Preferences (0x17)"
    keyServerPreferences:"No-modify (0x80)"
    length:"22"
    subpacketType:"undefined (0x21)"
    data:"04d5b4c43b48a879f6352936e659346e0ea35c67e5"
    length:"5"
    subpacketType:"Signature Creation Time (0x2)"
    creationTime:"Sat Apr 06 2019 18:36:32 GMT+0200 (heure d’été d’Europe centrale)"
    length:"2"
    subpacketType:"Primary User ID (0x19)"
    data:"01"
  unhashedDataCount: "10"
  subpackets:
    length:"9"
    subpacketType:"Issuer (0x10)"
    keyId:"59346e0ea35c67e5"
  signedHashValuePrefix: "75c1"
@sapk commented on GitHub (Apr 15, 2019): You seems to have re-sign your key the Sat Apr 06 2019 18:36:32 GMT+0200 for nearly 2.8 years so the date we display should be good. Maybe you re-sign this key on another computer and didn't re-import it re-sign in your other ? Based on : ``` Signature Packet (0x2) cipherTypeByte: "137" length: "599" version: "4" signatureType: "Positive certification of a User ID and Public-Key packet. (0x13)" publicKeyAlgorithm: "RSA (Encrypt or Sign) (0x1)" hashAlgorithm: "SHA256 (0x8)" hashedDataCount: "65" subpackets: length:"2" subpacketType:"Key Flags (0x1b)" keyFlags:"certify (0x1),sign (0x2)" length:"5" subpacketType:"Key Expiration Time (0x9)" data:"03c39105" length:"5" subpacketType:"Preferred Symmetric Algorithms (0xb)" preferredSymmetricAlgorithms:"AES with 256-bit key (0x9),AES with 192-bit key (0x8),AES with 128-bit key (0x7),TripleDES (DES-EDE, 168 bit key derived from 192) (0x2)" length:"6" subpacketType:"Preferred Hash Algorithms (0x15)" preferredHashAlgorithms:"SHA256 (0x8),SHA384 (0x9),SHA512 (0xa),SHA224 (0xb),SHA1 (0x2)" length:"4" subpacketType:"Preferred Compression Algorithms (0x16)" preferredCompressionAlgorithms:"ZLIB (0x2),BZip2 (0x3),ZIP (0x1)" length:"2" subpacketType:"Features (0x1e)" keyFeatures:"Modification detection (0x1)" length:"2" subpacketType:"Key Server Preferences (0x17)" keyServerPreferences:"No-modify (0x80)" length:"22" subpacketType:"undefined (0x21)" data:"04d5b4c43b48a879f6352936e659346e0ea35c67e5" length:"5" subpacketType:"Signature Creation Time (0x2)" creationTime:"Sat Apr 06 2019 18:36:32 GMT+0200 (heure d’été d’Europe centrale)" length:"2" subpacketType:"Primary User ID (0x19)" data:"01" unhashedDataCount: "10" subpackets: length:"9" subpacketType:"Issuer (0x10)" keyId:"59346e0ea35c67e5" signedHashValuePrefix: "75c1"
GiteaMirror commented 2025-11-02 05:03:02 -06:00
Author
Owner
Copy Link

@sapk commented on GitHub (Apr 15, 2019):

I don't know why gpg totally ignore some packets and if we should do the same.
Full dump from gpg --list-packets:

gpg --list-packets tastytea.asc 
# off=0 ctb=99 tag=6 hlen=3 plen=525
:public key packet:
	version 4, algo 1, created 1497703707, expires 0
	pkey[0]: [4096 bits]
	pkey[1]: [17 bits]
	keyid: 59346E0EA35C67E5
# off=528 ctb=b4 tag=13 hlen=2 plen=31
:user ID packet: "tastytea <tastytea@tastytea.de>"
# off=561 ctb=89 tag=2 hlen=3 plen=599
:signature packet: algo 1, keyid 59346E0EA35C67E5
	version 4, created 1554569389, md5len 0, sigclass 0x13
	digest algo 8, begin of digest 13 14
	hashed subpkt 27 len 1 (key flags: 03)
	hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 2)
	hashed subpkt 21 len 5 (pref-hash-algos: 8 9 10 11 2)
	hashed subpkt 22 len 3 (pref-zip-algos: 2 3 1)
	hashed subpkt 30 len 1 (features: 01)
	hashed subpkt 23 len 1 (keyserver preferences: 80)
	hashed subpkt 25 len 1 (primary user ID)
	hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5)
	hashed subpkt 2 len 4 (sig created 2019-04-06)
	hashed subpkt 9 len 4 (key expires after 2y293d4h1m)
	subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5)
	data: [4094 bits]
# off=1163 ctb=89 tag=2 hlen=3 plen=596
:signature packet: algo 1, keyid 59346E0EA35C67E5
	version 4, created 1497703707, md5len 0, sigclass 0x13
	digest algo 8, begin of digest 4a 1a
	hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5)
	hashed subpkt 2 len 4 (sig created 2017-06-17)
	hashed subpkt 27 len 1 (key flags: 03)
	hashed subpkt 9 len 4 (key expires after 2y0d21h11m)
	hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 2)
	hashed subpkt 21 len 5 (pref-hash-algos: 8 9 10 11 2)
	hashed subpkt 22 len 3 (pref-zip-algos: 2 3 1)
	hashed subpkt 30 len 1 (features: 01)
	hashed subpkt 23 len 1 (keyserver preferences: 80)
	subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5)
	data: [4095 bits]
# off=1762 ctb=89 tag=2 hlen=3 plen=599
:signature packet: algo 1, keyid 59346E0EA35C67E5
	version 4, created 1554568592, md5len 0, sigclass 0x13
	digest algo 8, begin of digest 75 c1
	hashed subpkt 27 len 1 (key flags: 03)
	hashed subpkt 9 len 4 (key expires after 2y0d21h11m)
	hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 2)
	hashed subpkt 21 len 5 (pref-hash-algos: 8 9 10 11 2)
	hashed subpkt 22 len 3 (pref-zip-algos: 2 3 1)
	hashed subpkt 30 len 1 (features: 01)
	hashed subpkt 23 len 1 (keyserver preferences: 80)
	hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5)
	hashed subpkt 2 len 4 (sig created 2019-04-06)
	hashed subpkt 25 len 1 (primary user ID)
	subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5)
	data: [4094 bits]
# off=2364 ctb=b4 tag=13 hlen=2 plen=18
:user ID packet: "gentoo@tastytea.de"
# off=2384 ctb=89 tag=2 hlen=3 plen=596
:signature packet: algo 1, keyid 59346E0EA35C67E5
	version 4, created 1554569389, md5len 0, sigclass 0x13
	digest algo 8, begin of digest 58 64
	hashed subpkt 27 len 1 (key flags: 03)
	hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 2)
	hashed subpkt 21 len 5 (pref-hash-algos: 10 9 8 11 2)
	hashed subpkt 22 len 3 (pref-zip-algos: 2 3 1)
	hashed subpkt 30 len 1 (features: 01)
	hashed subpkt 23 len 1 (keyserver preferences: 80)
	hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5)
	hashed subpkt 2 len 4 (sig created 2019-04-06)
	hashed subpkt 9 len 4 (key expires after 2y293d4h1m)
	subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5)
	data: [4094 bits]
# off=2983 ctb=89 tag=2 hlen=3 plen=596
:signature packet: algo 1, keyid 59346E0EA35C67E5
	version 4, created 1554568394, md5len 0, sigclass 0x13
	digest algo 8, begin of digest 6b 30
	hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5)
	hashed subpkt 2 len 4 (sig created 2019-04-06)
	hashed subpkt 27 len 1 (key flags: 03)
	hashed subpkt 9 len 4 (key expires after 2y0d21h11m)
	hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 2)
	hashed subpkt 21 len 5 (pref-hash-algos: 10 9 8 11 2)
	hashed subpkt 22 len 3 (pref-zip-algos: 2 3 1)
	hashed subpkt 30 len 1 (features: 01)
	hashed subpkt 23 len 1 (keyserver preferences: 80)
	subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5)
	data: [4094 bits]
# off=3582 ctb=b9 tag=14 hlen=3 plen=525
:public sub key packet:
	version 4, algo 1, created 1497703707, expires 0
	pkey[0]: [4096 bits]
	pkey[1]: [17 bits]
	keyid: CA258ACA1C76DAA7
# off=4110 ctb=89 tag=2 hlen=3 plen=572
:signature packet: algo 1, keyid 59346E0EA35C67E5
	version 4, created 1554569456, md5len 0, sigclass 0x18
	digest algo 8, begin of digest 7e 1e
	hashed subpkt 27 len 1 (key flags: 0C)
	hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5)
	hashed subpkt 2 len 4 (sig created 2019-04-06)
	hashed subpkt 9 len 4 (key expires after 2y293d4h2m)
	subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5)
	data: [4093 bits]
# off=4685 ctb=b9 tag=14 hlen=3 plen=1198
:public sub key packet:
	version 4, algo 17, created 1531759626, expires 0
	pkey[0]: [3072 bits]
	pkey[1]: [256 bits]
	pkey[2]: [3071 bits]
	pkey[3]: [3072 bits]
	keyid: CFC39497F1B26E07
# off=5886 ctb=89 tag=2 hlen=3 plen=691
:signature packet: algo 1, keyid 59346E0EA35C67E5
	version 4, created 1554569456, md5len 0, sigclass 0x18
	digest algo 8, begin of digest 60 6f
	hashed subpkt 27 len 1 (key flags: 02)
	hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5)
	hashed subpkt 2 len 4 (sig created 2019-04-06)
	hashed subpkt 9 len 4 (key expires after 1y264d0h3m)
	subpkt 32 len 117 (signature: v4, class 0x19, algo 17, digest algo 8)
	subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5)
	data: [4096 bits]
@sapk commented on GitHub (Apr 15, 2019): I don't know why gpg totally ignore some packets and if we should do the same. Full dump from gpg --list-packets: ``` gpg --list-packets tastytea.asc # off=0 ctb=99 tag=6 hlen=3 plen=525 :public key packet: version 4, algo 1, created 1497703707, expires 0 pkey[0]: [4096 bits] pkey[1]: [17 bits] keyid: 59346E0EA35C67E5 # off=528 ctb=b4 tag=13 hlen=2 plen=31 :user ID packet: "tastytea <tastytea@tastytea.de>" # off=561 ctb=89 tag=2 hlen=3 plen=599 :signature packet: algo 1, keyid 59346E0EA35C67E5 version 4, created 1554569389, md5len 0, sigclass 0x13 digest algo 8, begin of digest 13 14 hashed subpkt 27 len 1 (key flags: 03) hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 2) hashed subpkt 21 len 5 (pref-hash-algos: 8 9 10 11 2) hashed subpkt 22 len 3 (pref-zip-algos: 2 3 1) hashed subpkt 30 len 1 (features: 01) hashed subpkt 23 len 1 (keyserver preferences: 80) hashed subpkt 25 len 1 (primary user ID) hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5) hashed subpkt 2 len 4 (sig created 2019-04-06) hashed subpkt 9 len 4 (key expires after 2y293d4h1m) subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5) data: [4094 bits] # off=1163 ctb=89 tag=2 hlen=3 plen=596 :signature packet: algo 1, keyid 59346E0EA35C67E5 version 4, created 1497703707, md5len 0, sigclass 0x13 digest algo 8, begin of digest 4a 1a hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5) hashed subpkt 2 len 4 (sig created 2017-06-17) hashed subpkt 27 len 1 (key flags: 03) hashed subpkt 9 len 4 (key expires after 2y0d21h11m) hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 2) hashed subpkt 21 len 5 (pref-hash-algos: 8 9 10 11 2) hashed subpkt 22 len 3 (pref-zip-algos: 2 3 1) hashed subpkt 30 len 1 (features: 01) hashed subpkt 23 len 1 (keyserver preferences: 80) subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5) data: [4095 bits] # off=1762 ctb=89 tag=2 hlen=3 plen=599 :signature packet: algo 1, keyid 59346E0EA35C67E5 version 4, created 1554568592, md5len 0, sigclass 0x13 digest algo 8, begin of digest 75 c1 hashed subpkt 27 len 1 (key flags: 03) hashed subpkt 9 len 4 (key expires after 2y0d21h11m) hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 2) hashed subpkt 21 len 5 (pref-hash-algos: 8 9 10 11 2) hashed subpkt 22 len 3 (pref-zip-algos: 2 3 1) hashed subpkt 30 len 1 (features: 01) hashed subpkt 23 len 1 (keyserver preferences: 80) hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5) hashed subpkt 2 len 4 (sig created 2019-04-06) hashed subpkt 25 len 1 (primary user ID) subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5) data: [4094 bits] # off=2364 ctb=b4 tag=13 hlen=2 plen=18 :user ID packet: "gentoo@tastytea.de" # off=2384 ctb=89 tag=2 hlen=3 plen=596 :signature packet: algo 1, keyid 59346E0EA35C67E5 version 4, created 1554569389, md5len 0, sigclass 0x13 digest algo 8, begin of digest 58 64 hashed subpkt 27 len 1 (key flags: 03) hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 2) hashed subpkt 21 len 5 (pref-hash-algos: 10 9 8 11 2) hashed subpkt 22 len 3 (pref-zip-algos: 2 3 1) hashed subpkt 30 len 1 (features: 01) hashed subpkt 23 len 1 (keyserver preferences: 80) hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5) hashed subpkt 2 len 4 (sig created 2019-04-06) hashed subpkt 9 len 4 (key expires after 2y293d4h1m) subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5) data: [4094 bits] # off=2983 ctb=89 tag=2 hlen=3 plen=596 :signature packet: algo 1, keyid 59346E0EA35C67E5 version 4, created 1554568394, md5len 0, sigclass 0x13 digest algo 8, begin of digest 6b 30 hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5) hashed subpkt 2 len 4 (sig created 2019-04-06) hashed subpkt 27 len 1 (key flags: 03) hashed subpkt 9 len 4 (key expires after 2y0d21h11m) hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 2) hashed subpkt 21 len 5 (pref-hash-algos: 10 9 8 11 2) hashed subpkt 22 len 3 (pref-zip-algos: 2 3 1) hashed subpkt 30 len 1 (features: 01) hashed subpkt 23 len 1 (keyserver preferences: 80) subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5) data: [4094 bits] # off=3582 ctb=b9 tag=14 hlen=3 plen=525 :public sub key packet: version 4, algo 1, created 1497703707, expires 0 pkey[0]: [4096 bits] pkey[1]: [17 bits] keyid: CA258ACA1C76DAA7 # off=4110 ctb=89 tag=2 hlen=3 plen=572 :signature packet: algo 1, keyid 59346E0EA35C67E5 version 4, created 1554569456, md5len 0, sigclass 0x18 digest algo 8, begin of digest 7e 1e hashed subpkt 27 len 1 (key flags: 0C) hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5) hashed subpkt 2 len 4 (sig created 2019-04-06) hashed subpkt 9 len 4 (key expires after 2y293d4h2m) subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5) data: [4093 bits] # off=4685 ctb=b9 tag=14 hlen=3 plen=1198 :public sub key packet: version 4, algo 17, created 1531759626, expires 0 pkey[0]: [3072 bits] pkey[1]: [256 bits] pkey[2]: [3071 bits] pkey[3]: [3072 bits] keyid: CFC39497F1B26E07 # off=5886 ctb=89 tag=2 hlen=3 plen=691 :signature packet: algo 1, keyid 59346E0EA35C67E5 version 4, created 1554569456, md5len 0, sigclass 0x18 digest algo 8, begin of digest 60 6f hashed subpkt 27 len 1 (key flags: 02) hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5) hashed subpkt 2 len 4 (sig created 2019-04-06) hashed subpkt 9 len 4 (key expires after 1y264d0h3m) subpkt 32 len 117 (signature: v4, class 0x19, algo 17, digest algo 8) subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5) data: [4096 bits] ```
GiteaMirror commented 2025-11-02 05:03:02 -06:00
Author
Owner
Copy Link

@tastytea commented on GitHub (Apr 15, 2019):

On 2019-04-06 I added the email address gentoo@tastytea.de and changed the expiration dates on all keys. It seems since that day every keyid has 2 signatures?

I have cleaned the key now (gpg --edit-key, then clean) and now every keyid has only one signature, the one with the creation date 2019-04-06. But gpg still says that it expires 2020-04-05.

pub   rsa4096/59346E0EA35C67E5 2017-06-17 [SC] [expires: 2020-04-05]
      Key fingerprint = D5B4 C43B 48A8 79F6 3529  36E6 5934 6E0E A35C 67E5
uid                 [ultimate] tastytea <tastytea@tastytea.de>
uid                 [ultimate] gentoo@tastytea.de
sub   rsa4096/CA258ACA1C76DAA7 2017-06-17 [E] [expires: 2020-04-05]
sub   dsa3072/CFC39497F1B26E07 2018-07-16 [S] [expires: 2020-04-05]

% LC_ALL=C gpg --list-packets tastytea.asc
# off=0 ctb=99 tag=6 hlen=3 plen=525
:public key packet:
        version 4, algo 1, created 1497703707, expires 0
        pkey[0]: [4096 bits]
        pkey[1]: [17 bits]
        keyid: 59346E0EA35C67E5
# off=528 ctb=b4 tag=13 hlen=2 plen=31
:user ID packet: "tastytea <tastytea@tastytea.de>"
# off=561 ctb=89 tag=2 hlen=3 plen=599
:signature packet: algo 1, keyid 59346E0EA35C67E5
        version 4, created 1554569389, md5len 0, sigclass 0x13
        digest algo 8, begin of digest 13 14
        hashed subpkt 27 len 1 (key flags: 03)
        hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 2)
        hashed subpkt 21 len 5 (pref-hash-algos: 8 9 10 11 2)
        hashed subpkt 22 len 3 (pref-zip-algos: 2 3 1)
        hashed subpkt 30 len 1 (features: 01)
        hashed subpkt 23 len 1 (keyserver preferences: 80)
        hashed subpkt 25 len 1 (primary user ID)
        hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5)
        hashed subpkt 2 len 4 (sig created 2019-04-06)
        hashed subpkt 9 len 4 (key expires after 2y293d4h1m)
        subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5)
        data: [4094 bits]
# off=1163 ctb=b4 tag=13 hlen=2 plen=18
:user ID packet: "gentoo@tastytea.de"
# off=1183 ctb=89 tag=2 hlen=3 plen=596
:signature packet: algo 1, keyid 59346E0EA35C67E5
        version 4, created 1554569389, md5len 0, sigclass 0x13
        digest algo 8, begin of digest 58 64
        hashed subpkt 27 len 1 (key flags: 03)
        hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 2)
        hashed subpkt 21 len 5 (pref-hash-algos: 10 9 8 11 2)
        hashed subpkt 22 len 3 (pref-zip-algos: 2 3 1)
        hashed subpkt 30 len 1 (features: 01)
        hashed subpkt 23 len 1 (keyserver preferences: 80)
        hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5)
        hashed subpkt 2 len 4 (sig created 2019-04-06)
        hashed subpkt 9 len 4 (key expires after 2y293d4h1m)
        subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5)
        data: [4094 bits]
# off=1782 ctb=b9 tag=14 hlen=3 plen=525
:public sub key packet:
        version 4, algo 1, created 1497703707, expires 0
        pkey[0]: [4096 bits]
        pkey[1]: [17 bits]
        keyid: CA258ACA1C76DAA7
# off=2310 ctb=89 tag=2 hlen=3 plen=572
:signature packet: algo 1, keyid 59346E0EA35C67E5
        version 4, created 1554569456, md5len 0, sigclass 0x18
        digest algo 8, begin of digest 7e 1e
        hashed subpkt 27 len 1 (key flags: 0C)
        hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5)
        hashed subpkt 2 len 4 (sig created 2019-04-06)
        hashed subpkt 9 len 4 (key expires after 2y293d4h2m)
        subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5)
        data: [4093 bits]
# off=2885 ctb=b9 tag=14 hlen=3 plen=1198
:public sub key packet:
        version 4, algo 17, created 1531759626, expires 0
        pkey[0]: [3072 bits]
        pkey[1]: [256 bits]
        pkey[2]: [3071 bits]
        pkey[3]: [3072 bits]
        keyid: CFC39497F1B26E07
# off=4086 ctb=89 tag=2 hlen=3 plen=691
:signature packet: algo 1, keyid 59346E0EA35C67E5
        version 4, created 1554569456, md5len 0, sigclass 0x18
        digest algo 8, begin of digest 60 6f
        hashed subpkt 27 len 1 (key flags: 02)
        hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5)
        hashed subpkt 2 len 4 (sig created 2019-04-06)
        hashed subpkt 9 len 4 (key expires after 1y264d0h3m)
        subpkt 32 len 117 (signature: v4, class 0x19, algo 17, digest algo 8)
        subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5)
        data: [4096 bits]

I don't now much about GPG, but it seems that expires after refers to the creation date of the key (1497703707), not the creation date of the signature?

New public key, after clean: tastytea.asc.txt

@tastytea commented on GitHub (Apr 15, 2019): On 2019-04-06 I added the email address `gentoo@tastytea.de` and changed the expiration dates on all keys. It seems since that day every `keyid` has 2 signatures? I have cleaned the key now (gpg --edit-key, then clean) and now every `keyid` has only one signature, the one with the creation date `2019-04-06`. But gpg still says that it expires 2020-04-05. ``` pub rsa4096/59346E0EA35C67E5 2017-06-17 [SC] [expires: 2020-04-05] Key fingerprint = D5B4 C43B 48A8 79F6 3529 36E6 5934 6E0E A35C 67E5 uid [ultimate] tastytea <tastytea@tastytea.de> uid [ultimate] gentoo@tastytea.de sub rsa4096/CA258ACA1C76DAA7 2017-06-17 [E] [expires: 2020-04-05] sub dsa3072/CFC39497F1B26E07 2018-07-16 [S] [expires: 2020-04-05] ``` ``` % LC_ALL=C gpg --list-packets tastytea.asc # off=0 ctb=99 tag=6 hlen=3 plen=525 :public key packet: version 4, algo 1, created 1497703707, expires 0 pkey[0]: [4096 bits] pkey[1]: [17 bits] keyid: 59346E0EA35C67E5 # off=528 ctb=b4 tag=13 hlen=2 plen=31 :user ID packet: "tastytea <tastytea@tastytea.de>" # off=561 ctb=89 tag=2 hlen=3 plen=599 :signature packet: algo 1, keyid 59346E0EA35C67E5 version 4, created 1554569389, md5len 0, sigclass 0x13 digest algo 8, begin of digest 13 14 hashed subpkt 27 len 1 (key flags: 03) hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 2) hashed subpkt 21 len 5 (pref-hash-algos: 8 9 10 11 2) hashed subpkt 22 len 3 (pref-zip-algos: 2 3 1) hashed subpkt 30 len 1 (features: 01) hashed subpkt 23 len 1 (keyserver preferences: 80) hashed subpkt 25 len 1 (primary user ID) hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5) hashed subpkt 2 len 4 (sig created 2019-04-06) hashed subpkt 9 len 4 (key expires after 2y293d4h1m) subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5) data: [4094 bits] # off=1163 ctb=b4 tag=13 hlen=2 plen=18 :user ID packet: "gentoo@tastytea.de" # off=1183 ctb=89 tag=2 hlen=3 plen=596 :signature packet: algo 1, keyid 59346E0EA35C67E5 version 4, created 1554569389, md5len 0, sigclass 0x13 digest algo 8, begin of digest 58 64 hashed subpkt 27 len 1 (key flags: 03) hashed subpkt 11 len 4 (pref-sym-algos: 9 8 7 2) hashed subpkt 21 len 5 (pref-hash-algos: 10 9 8 11 2) hashed subpkt 22 len 3 (pref-zip-algos: 2 3 1) hashed subpkt 30 len 1 (features: 01) hashed subpkt 23 len 1 (keyserver preferences: 80) hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5) hashed subpkt 2 len 4 (sig created 2019-04-06) hashed subpkt 9 len 4 (key expires after 2y293d4h1m) subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5) data: [4094 bits] # off=1782 ctb=b9 tag=14 hlen=3 plen=525 :public sub key packet: version 4, algo 1, created 1497703707, expires 0 pkey[0]: [4096 bits] pkey[1]: [17 bits] keyid: CA258ACA1C76DAA7 # off=2310 ctb=89 tag=2 hlen=3 plen=572 :signature packet: algo 1, keyid 59346E0EA35C67E5 version 4, created 1554569456, md5len 0, sigclass 0x18 digest algo 8, begin of digest 7e 1e hashed subpkt 27 len 1 (key flags: 0C) hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5) hashed subpkt 2 len 4 (sig created 2019-04-06) hashed subpkt 9 len 4 (key expires after 2y293d4h2m) subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5) data: [4093 bits] # off=2885 ctb=b9 tag=14 hlen=3 plen=1198 :public sub key packet: version 4, algo 17, created 1531759626, expires 0 pkey[0]: [3072 bits] pkey[1]: [256 bits] pkey[2]: [3071 bits] pkey[3]: [3072 bits] keyid: CFC39497F1B26E07 # off=4086 ctb=89 tag=2 hlen=3 plen=691 :signature packet: algo 1, keyid 59346E0EA35C67E5 version 4, created 1554569456, md5len 0, sigclass 0x18 digest algo 8, begin of digest 60 6f hashed subpkt 27 len 1 (key flags: 02) hashed subpkt 33 len 21 (issuer fpr v4 D5B4C43B48A879F6352936E659346E0EA35C67E5) hashed subpkt 2 len 4 (sig created 2019-04-06) hashed subpkt 9 len 4 (key expires after 1y264d0h3m) subpkt 32 len 117 (signature: v4, class 0x19, algo 17, digest algo 8) subpkt 16 len 8 (issuer key ID 59346E0EA35C67E5) data: [4096 bits] ``` I don't now much about GPG, but it seems that `expires after` refers to the creation date of the key (`1497703707`), not the creation date of the signature? New public key, after clean: [tastytea.asc.txt](https://github.com/go-gitea/gitea/files/3082346/tastytea.asc.txt)
GiteaMirror commented 2025-11-02 05:03:02 -06:00
Author
Owner
Copy Link

@sapk commented on GitHub (Apr 15, 2019):

@tastytea you are right https://tools.ietf.org/html/rfc4880#section-5.2.3.6

I will fix the mistake.

@sapk commented on GitHub (Apr 15, 2019): @tastytea you are right https://tools.ietf.org/html/rfc4880#section-5.2.3.6 I will fix the mistake.
GiteaMirror commented 2025-11-02 05:03:02 -06:00
Author
Owner
Copy Link

@sapk commented on GitHub (Apr 15, 2019):

I will add test to the PR. You may need to re-import the key as the expiration time is calculated at import.

@sapk commented on GitHub (Apr 15, 2019): I will add test to the PR. You may need to re-import the key as the expiration time is calculated at import.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
$20
$250
$50
$500
backport/done
💎 Bounty
docs-update-needed
good first issue
hacktoberfest
issue/bounty
issue/confirmed
issue/critical
issue/duplicate
issue/needs-feedback
issue/not-a-bug
issue/regression
issue/stale
issue/workaround
lgtm/need 2
modifies/api
modifies/translation
outdated/backport/v1.18
outdated/theme/markdown
outdated/theme/timetracker
performance/bigrepo
performance/cpu
performance/memory
performance/speed
pr/breaking
proposal/accepted
proposal/rejected
pr/wip
pull-request
Mirrored from GitHub Pull Request
 reviewed/wontfix
💰 Rewarded
skip-changelog
status/blocked
topic/accessibility
topic/api
topic/authentication
topic/build
topic/code-linting
topic/commit-signing
topic/content-rendering
topic/deployment
topic/distribution
topic/federation
topic/gitea-actions
topic/issues
topic/lfs
topic/mobile
topic/moderation
topic/packages
topic/pr
topic/projects
topic/repo
topic/repo-migration
topic/security
topic/theme
topic/ui
topic/ui-interaction
topic/ux
topic/webhooks
topic/wiki
type/bug
type/deprecation
type/docs
type/enhancement
type/feature
type/miscellaneous
type/proposal
type/question
type/refactoring
type/summary
type/testing
type/upstream
No Label type/bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#3181
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?