如何在不手动执行的情况下信任您信任的一堆公共PGP密钥



我只需要信任一个与PASS一起使用的公共密钥。不幸的是,我没有找到一种简单的方法来信任我本地存储的所有公共钥匙。我发现它在时间顺序的情况下发现它非常昂贵:

> gpg --edit-key XXXXXXXXXXXXXXXX
  gpg (GnuPG) 2.2.10; Copyright (C) 2018 Free Software Foundation, Inc.
  This is free software: you are free to change and redistribute it.
  There is NO WARRANTY, to the extent permitted by law.
pub  rsa4096/XXXXXXXXXXXXXXXX
     created: 2018-11-16  expires: never       usage: SC  
     trust: unknown       validity: unknown
sub  rsa4096/XXXXXXXXXXXXXXXX
     created: 2018-11-16  expires: never       usage: E   
[ unknown] (1). email@example.com
gpg> trust
pub  rsa4096/XXXXXXXXXXXXXXXX
     created: 2018-11-16  expires: never       usage: SC  
     trust: unknown       validity: unknown
sub  rsa4096/XXXXXXXXXXXXXXXX
     created: 2018-11-16  expires: never       usage: E   
[ unknown] (1). email@example.com
Please decide how far you trust this user to correctly verify other users' keys
(by looking at passports, checking fingerprints from different sources, etc.)
  1 = I don't know or won't say
  2 = I do NOT trust
  3 = I trust marginally
  4 = I trust fully
  5 = I trust ultimately
  m = back to the main menu
Your decision? y
Your decision? 5
Do you really want to set this key to ultimate trust? (y/N) y
pub  rsa4096/XXXXXXXXXXXXXXXX
     created: 2018-11-16  expires: never       usage: SC  
     trust: ultimate      validity: unknown
sub  rsa4096/XXXXXXXXXXXXXXXX
     created: 2018-11-16  expires: never       usage: E   
[ unknown] (1). email@example.com
Please note that the shown key validity is not necessarily correct
unless you restart the program.
gpg> q

如何快速进行?

环顾四周,我找到了一个描述过程的博客:ow-to to to trust-a-public-key-key-non-interacticaly

提出的解决方案在那里不使用Counter GPG版本。为了使其正常工作,我使用了以下命令:

gpg --list-keys --fingerprint |grep pub -A 1|egrep -Ev "pub|--"|tr -d ' ' 
 | awk 'BEGIN { FS = "n" } ; { print $1":6:" } ' | gpg --import-ownertrust

基本上它创建了一个所有者Trust文本,然后由GPG即时导入。

最新更新