Endpoint Encryption

We received a public key which was created with BCPG v1.41 from a client. When attempting to import this Public Key to PGP Command Line 9.5.2 at a Sun Solaris server, the import fails.

Usually, you will see a message as below when running the import option.

$> pgp --import XXXXXXXX.asc

XXXXXXXX.asc:import key (0:key imported as 0xBA11A907 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX)

But we got nothing back when importing this public key. The return code for the command was zero and we couldn't find this key by running --list-keys option.

$> pgp --import JPMC_ECS_FTS4_2014.asc

Does anyone have an idea what may be the problem?

BTW, this is an valid key, since I was able to import it into GnuPG at a different server.

Thanks,

Jean

I'm sorry you are seeing this issue.

9.5.2 is rather old so it is hard to know what the error might be.  A search of the bug database didn't show anything immediately obvious.

It's interesting that the status return value is zero.  If you run with "--verbose --debug" do you get any additional information?

Do other keys continue to import properly?  If you export this key from GnuPG, does that version of the key import?  Can you post details of the key as listed by GnuPG?

Thanks.

Hi David,

Yes, I can still import other keys into our PGP. Here is what I got the from the debug option.

 $> pgp --import --verbose --debug JPMC_ECS_CAT_2014.asc
pgp:import key (3157:current local time 2013-02-13T16:09:13-04:00)
/u/ftphub/.pgp/pubring.pkr:open keyrings (1006:public keyring)
/u/ftphub/.pgp/secring.skr:open keyrings (1007:private keyring)
 

I also tried GnuPG and was able to import this key, here is the key details.

pub   2048R/F98B7CC3 2012-02-21 [expires: 2014-05-01]
uid                  File_Transfer_Services <connectivity.services.engineering@jpmchase.com>
sub   2048R/22EF092B 2012-02-21 [expires: 2014-05-01]
 

Thanks,

Jean

Unfortunately, there isn't enough information to go on here.

Would your partner let you post their public key?  (Or is there some server where I can get it?)  But even if I discovered a problem, the advice would most likely be to upgrade to a newer version of PGP Command Line.

Thank you David, I agree with you that we probably need a newer version.