{"action":"created","issue":{"url":"https://api.github.com/repos/Yubico/ykneo-openpgp/issues/25","labels_url":"https://api.github.com/repos/Yubico/ykneo-openpgp/issues/25/labels{/name}","comments_url":"https://api.github.com/repos/Yubico/ykneo-openpgp/issues/25/comments","events_url":"https://api.github.com/repos/Yubico/ykneo-openpgp/issues/25/events","html_url":"https://github.com/Yubico/ykneo-openpgp/issues/25","id":56536600,"number":25,"title":"fetch assumes signing key is master key and fails if not","user":{"login":"aelana","id":1087356,"avatar_url":"https://avatars.githubusercontent.com/u/1087356?v=3","gravatar_id":"","url":"https://api.github.com/users/aelana","html_url":"https://github.com/aelana","followers_url":"https://api.github.com/users/aelana/followers","following_url":"https://api.github.com/users/aelana/following{/other_user}","gists_url":"https://api.github.com/users/aelana/gists{/gist_id}","starred_url":"https://api.github.com/users/aelana/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aelana/subscriptions","organizations_url":"https://api.github.com/users/aelana/orgs","repos_url":"https://api.github.com/users/aelana/repos","events_url":"https://api.github.com/users/aelana/events{/privacy}","received_events_url":"https://api.github.com/users/aelana/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-02-04T14:55:21Z","updated_at":"2015-02-04T15:15:14Z","closed_at":null,"body":"I currently have a master key with three subkeys, one for signing, one for encryption and one for authentication.  I loaded the three subkeys on the NEO and everything works fine except fetch on a new machine.  (The master key is intended to live offline and only used to occasionally re-issue or re-certify subkeys).\r\n\r\nIf I do a gpg --card-edit followed by a 'fetch', I get the error\r\n\r\ngpg: requesting key AEB99527 from https server gist.githubusercontent.com\r\ngpg: no valid OpenPGP data found.\r\ngpg: Total number processed: 0\r\n\r\nWhere AEB99527 is the signing subkey identifier not the master key identifier which is what it should be \"fetching\".\r\n\r\nIt appears to be pulling the key from the https server and comparing the key identity with what it expects which appears to be the subkey instead of just accepting the key data that is there which is the master public key which includes the public keys of the subkeys.  (There is no easy or supported way to separate out the public key of a single subkey)\r\n\r\nIf I manually load the public key of the master (the one at the URL I configured) and then run gpg --card-status everything works properly\r\n(the resulting --list-secret shows as follows):\r\nsec#  4096R/757C0180 2015-02-03 [expires: 2015-11-30]\r\nuid                  John Tennyson\r\nuid                  Elvish Wanderer <aelana@me.com>\r\nuid                  Elvish Wanderer <aelana@mac.com>\r\nuid                  John Tennyson <jtennys@umass.edu>\r\nuid                  John Tennyson <john.tennyson@me.com>\r\nuid                  John Tennyson <john.tennyson@mac.com>\r\nuid                  John Tennyson <john.tennyson@umass.edu>\r\nuid                  John Tennyson <jtennyson@oit.umass.edu>\r\nuid                  Elvish Wanderer <aelana@elfindreams.com>\r\nssb>  2048R/AEB99527 2015-02-03\r\nssb>  2048R/CADC0F35 2015-02-03\r\nssb>  2048R/C40CA003 2015-02-03\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/Yubico/ykneo-openpgp/issues/comments/72872242","html_url":"https://github.com/Yubico/ykneo-openpgp/issues/25#issuecomment-72872242","issue_url":"https://api.github.com/repos/Yubico/ykneo-openpgp/issues/25","id":72872242,"user":{"login":"jas4711","id":531817,"avatar_url":"https://avatars.githubusercontent.com/u/531817?v=3","gravatar_id":"","url":"https://api.github.com/users/jas4711","html_url":"https://github.com/jas4711","followers_url":"https://api.github.com/users/jas4711/followers","following_url":"https://api.github.com/users/jas4711/following{/other_user}","gists_url":"https://api.github.com/users/jas4711/gists{/gist_id}","starred_url":"https://api.github.com/users/jas4711/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jas4711/subscriptions","organizations_url":"https://api.github.com/users/jas4711/orgs","repos_url":"https://api.github.com/users/jas4711/repos","events_url":"https://api.github.com/users/jas4711/events{/privacy}","received_events_url":"https://api.github.com/users/jas4711/received_events","type":"User","site_admin":false},"created_at":"2015-02-04T15:15:14Z","updated_at":"2015-02-04T15:15:14Z","body":"This is a GnuPG issue, right?  Try asking on gnupg-user, or if that fails, reporting a GnuPG bug.  Personally, I haven't used 'fetch' since --card-status followed by --recv-keys on the key has been sufficient.  But that requires that you have uploaded your key to a keyserver."}}