--===============5668224223687061376==
Content-Type: multipart/signed; boundary="nextPart4910127.31r3eYUQgx";
 micalg="pgp-sha512"; protocol="application/pgp-signature"

--nextPart4910127.31r3eYUQgx
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="iso-8859-1"; protected-headers="v1"
From: Ingo =?ISO-8859-1?Q?Kl=F6cker?= <kloecker@kde.org>
To: gnupg-users@gnupg.org
Reply-To: gnupg-users@gnupg.org
Subject: Re: Fails signing key with Yubikey
Date: Thu, 21 Mar 2024 13:24:24 +0100
Message-ID: <6032211.lOV4Wx5bFT@daneel>
MIME-Version: 1.0

On Donnerstag, 21. M=E4rz 2024 08:22:48 CET Alexis via Gnupg-users wrote:
>      I'm trying to sign a secondary key with my yubikey, however it fails
> saying the private key is not found. I'm able to sign files with `--sign`,
> but am not able to use `--sign-key`.

Your Yubikey holds three keys:
* a signing key (corresponding to a sign-only subkey of your OpenPGP key)
> ssb:u:255:22:D0753D43F3C7A942:1700197520:1731733520:::::s:::D276000124010=
30
> 40006250173860000::ed25519::
* an encryption key
> ssb:u:255:18:90A11AD910FBE44E:1700197567:1731733567:::::e:::D276000124010=
304
> 0006250173860000::cv25519::
* an authentication key
> ssb:u:255:22:3A7E3018D78FC26A:1700197579:1731733579:::::a:::D276000124010=
304
> 0006250173860000::ed25519::

None of those keys are suitable for certifying other keys because for this =
you=20
need a certification key. Only the primary key of your OpenPGP key can be u=
sed=20
for certifying.
> sec:u:255:22:6141FD27892AE9B4:1700197485:::u:::cESCA:::#::ed25519:::0:

Regards,
Ingo

--nextPart4910127.31r3eYUQgx
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part.
Content-Transfer-Encoding: 7Bit

-----BEGIN PGP SIGNATURE-----

iHUEABYKAB0WIQTbjgIOMowwlCBgvyGxb1mVFkdKugUCZfwm+AAKCRCxb1mVFkdK
uqYXAQCauNSHQpbYp2Epqcks6cG+02fMnbcMKLLg6dCdh92N1QD9GgUzWjC6w477
aNXihAJWzeDiTJGA8H+zCCDXyKIvHwI=
=oM+E
-----END PGP SIGNATURE-----

--nextPart4910127.31r3eYUQgx--





--===============5668224223687061376==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users

--===============5668224223687061376==--