I'm having trouble updating my expired PGP key in a CIphermail instance.
Here is what I did:
* My public key was expired, so I generated a new public key with no
expiration date. I tested it locally in Thunderbird: I deleted my
old public key; I imported the new one and tried to send some
encrypted emails. All fine.
* I uploaded my PGP key to our own PGP key server
(https://pgpkeys.icij.org) and made sure the new public key was in
place: I downloaded and checked the downloaded one, it was the
correct one without the expiration date.
* I logged in to our CIphermail instance, went to PGP area, and
searched for my old, expired key. It showed as expired, and I
deleted it. I verified that my key was no longer available in
* I went to the "Search keys" area, to download again my new key from
our PGP keyserver into CIphermail (our CIphermail is configured with
just one PGP keyserver: our private one).
* I located my new key, it showed the right one: recently created and
no expiration date. I imported it into Ciphermail.
* When I go again to the main PGP keys and search for my key, it shows
again my key as expired.
* If I click on "Download Public keys" link, the downloaded public key
is the _good_ one, without an expiration date.
So it seems I can't update my expired PGP key. It looks like Ciphermail
is somehow keeping my expiration date somewhere, and ignoring the new
"non-expiration" from the newly downloaded key, even if I delete the old
key and reimport the new one.
*Jorge Gonzalez Villalonga*
*The International Consortium of Investigative Journalists*
1710 Rhode Island Ave NW, 11th floor | Washington DC 20036 | United States
Phone: +34 672 173 200 (Madrid, Spain)