How to ensure OpenPGP compliance?

Hi,

I have the latest version of GnuPG.

I’d like to make my keys OpenPGP-compliant to work with Thunderbird, as detailed here. I’ve tried their instructions, including replacing --rfc4880 with --openpgp, but my keys still have the LibrePGP-exclusive flags. Am I doing something wrong?

Alternatively, how do I set the openpgp flag in the gpg.conf file?

I’d be grateful for any help you can give.

– Jack

Hi @prizedrice,

What is your goal? Do you just want to be able to import the key in Thunderbird? I also was not able to do this with a file.
But when I exported the key with the option --armor then copied it and chose EditImport Key(s) from Clipboard I was able to import it.

Tried with GnuPG 2.4.8 and Thunderbird 128.12.0esr.

Just write openpgp in a seperate line in gpg.conf.

Thanks for the response.

Yes, I’m trying to import the key to Thunderbird without it telling me that there are unsupported feature flags.

The flags --rfc4880 and putting rfc4880 in gpg.conf are not doing anything. Unsupported feature flags are still being added, such as AEAD.

I cannot confirm that is doesn’t do anything. Without --rfc4880 the pref list is set to

Cipher: AES256, AES192, AES, 3DES
AEAD: OCB
Digest: SHA512, SHA384, SHA256, SHA224, SHA1
Compression: ZLIB, BZIP2, ZIP, Uncompressed
Features: MDC, AEAD, Keyserver no-modify

With --rfc4880 it is set to

Cipher: AES256, AES192, AES, 3DES
AEAD: 
Digest: SHA512, SHA384, SHA256, SHA224, SHA1
Compression: ZLIB, BZIP2, ZIP, Uncompressed
Features: MDC, Keyserver no-modify

You can see that AEAD is empty and it is missing in Features.

Did you try to do it via clipboard import as I explained above?

Hmm, strange. I’m on macOS and the flag does nothing with these commands:

gpg --rfc4880 --edit-key [identifier]
setpref
save

What command are you using exactly? For me, Features still includes AEAD.

On Mac there is no clipboard import, but as GPG was still showing that the key had extra features I’m not sure Thunderbird was the issue. Exporting and then re-importing a Thunderbird-created key does not warn of unsupported features, and checking the key in GPG shows no extra feature flags.

The same as you:

gpg --rfc4880 --edit-key [identifier]
setpref
save

So there is no such option in the OpenPGP Key Manager?:

Which version of Thunderbird are you using? And when you are talking about the latest version of GnuPG do you mean 2.4.8?

What happens if you are using --compliance=rfc4880 instead of --rfc4880? You can also use the option -vvv to get more details. Maybe it gives you some useful information when the options don’t work.

Weird.

Sorry, you are right. I didn’t notice the clipboard import option as it’s in a weird other menu on macOS. But yep, no change.

Thunderbird 144.0.1 and GnuPG 2.4.8.

It just says Invalid command (try "help"). Same thing for both --compliance=rfc4880 and --rfc4880.