Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I want to check whether the gpg key used by Julien Danjou for his emacs snapshot repository can be trusted. There are many trust paths from my key to Juliens key. But I can't believe that there shouldn't be any gpg command which just answers this simple question from my local keyring. Or is there?

Apparently I'm not the only one having this problem.

share|improve this question

migrated from stackoverflow.com Nov 9 '12 at 2:28

This question came from our site for professional and enthusiast programmers.

2 Answers 2

up vote 0 down vote accepted

You're right to be concerned; that Julien Danjou guy is slippery. (Kidding!)

I believe you're looking for this command:

gpg --list-keys --list-options show-uid-validity 8B78A5C2
share|improve this answer

You can use pathfinder sites like Henk P. Penning's pathfinder, although they need you to push the keys to specific keyservers.

There's also the sigtrace tool, but that one requires that you import all the intermediate keys in your keyring, which can generate quite a lot of noise.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.