获取OpenPGP密钥的指纹

Question

我正在尝试从ActiveMQ的公开OpenPGP密钥获取指纹。它们发布在http://www.apache.org/dist/activemq/KEYS上。

不幸的是，并非所有键旁边都列出了指纹。您知道如何进行吗？

Answer 1

我使用了这个命令（用 gpg 2.2.12 测试）：

 gpg --show-keys file.pub

对于旧版本，请参阅 Jens Erat 的答案。对于较新的版本gpg --with-fingerprint不起作用并返回：

gpg: WARNING: no command supplied.  Trying to guess what you mean ...

Answer 2

指纹是从公用密钥和创建时间戳派生的-两者都包含在站点上列出的公用密钥中。有几种不导入密钥而检查密钥的方法，这也可以确保您打印当前正在考虑的特定密钥的信息。--with-fingerprint使得GnuPG在列出密钥时始终输出指纹。获取指纹的一种方法是：

$ gpg --with-fingerprint <<EOT
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.1 (Darwin)
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=RBPl
-----END PGP PUBLIC KEY BLOCK-----
EOT
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   dsa1024/0x9FF25980F5BA7E4F 2006-02-10 [SCA]
      Key fingerprint = E5B8 247A F8A6 19A2 8F90  FDFC 9FF2 5980 F5BA 7E4F
uid                             Hiram Chirino <hiram@hiramchirino.com>
sub   elg1024/0x10314D676733C080 2006-02-10 [E]

您也可以提供完整的页面，然后GnuPG可以轻松打印所有指纹grep。

Answer 3

gpg --show-keys --fingerprint <<EOT\n-----BEGIN PGP PUBLIC KEY BLOCK-----\nVersion: GnuPG v1.4.1 (Darwin)\n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\nzL5kZCj7c8MN8YZDAKDR9LTb6woveul50+uGtUl2fIH1uA==\n=RBPl\n-----END PGP PUBLIC KEY BLOCK-----\nEOT\npub   dsa1024 2006-02-10 [SCA]\n      E5B8 247A F8A6 19A2 8F90  FDFC 9FF2 5980 F5BA 7E4F\nuid                      Hiram Chirino <hiram@hiramchirino.com>\nsub   elg1024 2006-02-10 [E]\n

\n

来自 GPG 手册 -

\n

       --show-keys\n              This  commands  takes OpenPGP keys as input and prints information about them\n              in the same way the command --list-keys does for locally stored key.  In  ad\xe2\x80\x90\n              dition the list options show-unusable-uids, show-unusable-subkeys, show-nota\xe2\x80\x90\n              tions and show-policy-urls are also enabled.  As usual for automated process\xe2\x80\x90\n              ing, this command should be combined with the option --with-colons.\n\n       --fingerprint\n              List  all keys (or the specified ones) along with their fingerprints. This is\n              the same output as --list-keys but with the additional output of a line  with\n              the  fingerprint. May also be combined with --check-signatures.  If this com\xe2\x80\x90\n              mand is given twice, the fingerprints of all secondary keys are  listed  too.\n              This  command also forces pretty printing of fingerprints if the keyid format\n              has been set to "none".\n\n       --with-fingerprint\n              Same  as  the command --fingerprint but changes only the format of the output\n              and may be used together with another command.\n

\n

我的 GnuPG 版本是2.2.20

\n

参考 -

\n

https://unix.stackexchange.com/a/694646/356166

\n