generated key just has verification flag in GPA about openpgp-php

[DanielRuf]

Possibly related to this: http://stackoverflow.com/questions/35633351/cant-decrypt-file-encrypted-with-openpgp-php-in-gnupg

Confirmed, this does not work here. Decryption fails (no valid encrypted PGP data) and encryption also (throws exception and crashes GPA).

The encrypt/decrypt (E) capability is missing.

http://www.hauke-laging.de/sicherheit/subkeys.en.html

E: encryption / decryption

pub  1024R/86CF75F5  erzeugt: 2016-02-26  verfällt: niemals     Aufruf(usage): C
                     Vertrauen: unbekannt     Gültigkeit: unbekannt
[  unbek.] (1). TEST

[DanielRuf]

Any update about this problem @singpolyma?

[DanielRuf]

I have tracked it down to these lines

The values from here seem to not be properly added, just the first value is actually used

openpgp-php/lib/openpgp_crypt_rsa.php

Line 157 in ff4bd67

$sig->hashed_subpackets[] = new OpenPGP_SignaturePacket_KeyFlagsPacket(array(0x01, 0x02));

All values are processed

openpgp-php/lib/openpgp.php

Line 1194 in cefaef2

$bytes .= chr($f);

[1]=>
        object(OpenPGP_SignaturePacket_KeyFlagsPacket)#28 (4) {
          ["tag"]=>
          int(27)
          ["size"]=>
          NULL
          ["data"]=>
          NULL
          ["flags"]=>
          array(...) {

https://tools.ietf.org/html/rfc4880#section-5.2.3.21

Also the public key is not shown in GPA, just the private key.
The generated public key contains also the pirvate key. Possibly this is caused by $pubm = clone($m); which clones the secret key packet and replaces just the first packet. But there is still the one flags packet left (which should be different for the public key) and the public key still has the private key packets included in some places.

openpgp-php/examples/keygen.php

Line 29 in bcc9c92

$pubm[0] = new OpenPGP_PublicKeyPacket($pubm[0]);

[DanielRuf]

@meitar importing the public key should be possible with --allow-non-selfsigned-uid see http://stackoverflow.com/questions/35633351/cant-decrypt-file-encrypted-with-openpgp-php-in-gnupg

I will take a look again at the code and the issue with the flags and provide a PR if possible.

[fabacab]

@DanielRuf Okay, but I'm not having any trouble importing the public key. It's generating a revocation certificate that I'm having trouble with (see above reference). :\

[singpolyma]

Please test my latest version with 741fec2 and see if this helps you.

[fabacab]

@singpolyma The newest commits do create a key with the S (signing) capability and also the C (certify) capability. The previous keys generated with this library were created with only the C (certify) capability. So that's definitely a fix, if that's as intended.

However, as per @DanielRuf's question, this does not resolve the issue with manually creating a revocation certificate (described in #31). These latest commits do not affect that issue at all.

[singpolyma]

@meitar are you using the example script to do they keygen? I specifically refer to the commit that fixes the keygen example to use the correct p/u values. This changed fixed revocation generation for me in gpg locally.

[fabacab]

I specifically refer to the commit that fixes the keygen example to use the correct p/u values.

Ah!! I'm sorry, I was looking only at commits in lib and the dependencies.

You're right, using the correct p/q values enables me to create a revocation certificate as well. Thank you!