Re: Many more sigs show when I add --with-colons to --list-sigs

--===============7989702411838919217==
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="UmgFabSv7GYQatUo"
Content-Disposition: inline

--UmgFabSv7GYQatUo
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Jul 28, 2026 at 05:45:48PM +0200, Werner Koch via Gnupg-users wrote:
> You should use --checks-igs instead of --list-sig to actually check the
> signatures.  You may try
>=20
>   --list-options show-unusable-sigs
>=20
> to also include signature which are not shown due to their use of SHA-1.

gpg --check-sigs --list-options show-unusable-sigs waltman
pub   dsa1024 1999-10-20 [SC]
      77D4D81DC47D68FA9E9E6A7C5DF19E2B67A7B584
uid           [ultimate] Walter C. Mankowski <[email protected]>
sig!3        5DF19E2B67A7B584 2001-07-05  [self-signature]
sig!3        5DF19E2B67A7B584 2004-02-09  [self-signature]
gpg: Note: third-party key signatures using the SHA1 algorithm are rejected
gpg: (use option "--allow-weak-key-signatures" to override)
sig%2        0393622EE1021E7E 2004-06-22  [Invalid digest algorithm]
sig!3        16BF8C4C0D1DAE4B 2003-01-10  Jeff Abrahamson (PhD student at D=
rexel University, roughly 2002 - 2007.) <[email protected]>
sig%         1ADE8C07B1B29E59 2009-07-16  [Invalid digest algorithm]
sig!         3FEFE6DA8501AFEA 2003-01-09  LeRoy D. Cressy (ldc) <leroy@lrcr=
essy.com>
sig!3        49820C1CEA59038E 2002-11-07  Stephen Gran <[email protected]>
sig!         63DEA2E21E4CD1E8 2001-11-21  Eric J. Roode <[email protected]>
sig!3        C7C4DA125477A8C3 2004-03-08  Jon Moore <[email protected]>
sig!         D106E9E1B3D9BDEB 2008-01-04  Michael Greb <[email protected]=
m>
sig!         DAC1A9BD742B67FE 2002-04-19  Eric Allan Lucas <[email protected]>
sig!         F5E85A700CF9091A 2001-08-08  gabriel rosenkoetter <gr@eclipsed=
=2Enet>
uid           [ultimate] Walter C. Mankowski <[email protected]>
sig!3        5DF19E2B67A7B584 2005-01-29  [self-signature]
sig%         1ADE8C07B1B29E59 2009-07-16  [Invalid digest algorithm]
sig!3        3FEFE6DA8501AFEA 2005-02-06  LeRoy D. Cressy (ldc) <leroy@lrcr=
essy.com>
sig!         D106E9E1B3D9BDEB 2008-01-04  Michael Greb <[email protected]=
m>
uid           [ultimate] Walter C. Mankowski <[email protected]>
sig!3        5DF19E2B67A7B584 2025-06-20  [self-signature]
sub   elg1024 1999-10-20 [E]
sig!         5DF19E2B67A7B584 1999-10-20  [self-signature]
sub   rsa4096 2025-06-20 [S]
sig!         5DF19E2B67A7B584 2025-06-20  [self-signature]

gpg: 16 good signatures
gpg: 99 signatures not checked due to missing keys
gpg: 3 signatures not checked due to errors

Thanks, this explains what's going on. First, I need to use
--check-sigs instead of --list-sigs. Those signatures listed as valid
are all old dsa1024 sigs, but they appear to still be valid.

The second issue is that I'm missing most of my signatures. That makes
sense. My keychain was getting unweildy so I'd decided when I moved to
a new box that I'd download keys as I needed them.

Walt

--UmgFabSv7GYQatUo
Content-Type: application/pgp-signature; name=signature.asc

-----BEGIN PGP SIGNATURE-----
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=ZlL7
-----END PGP SIGNATURE-----

--UmgFabSv7GYQatUo--


--===============7989702411838919217==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Gnupg-users mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gnupg-users

--===============7989702411838919217==--