Just FYI, Kapil got me going but we found an issue during the process that’s going to require some document updates. They made a change to stop DoS of fake keys so now you doing the refresh or receive after the key has been signed won’t show any updates. Performing either:
gpg --keyserver hkps://keyserver.ubuntu.com --recv-keys <your-key> or gpg --keyserver hkp://keyserver.ubuntu.com:80 --refresh-key will not result in Updated: 1 as documented now. The key won’t be pulled.
There needs to be a modification to gpg.conf (which in most cases doesn’t exist so it needs to be created). So you will need to edit/create ${GNUPGHOME:-$HOME/.gnupg}/gpg.conf and add this line: keyserver-options no-self-sigs-only,no-import-clean
Again these two steps are needed:
- Edit/Add
${GNUPGHOME:-$HOME/.gnupg}/gpg.conf - Add this line:
keyserver-options no-self-sigs-only,no-import-clean
Once that is done, the refresh and recv-keys options will show the changes as well as --show-sigs.