keybase / keybase-issues

A single repo for managing publicly recognized issues with the keybase client, installer, and website.
902 stars 37 forks source link

Cannot add new PGP key via curl after revoked an old key #2310

Open frantic1048 opened 8 years ago

frantic1048 commented 8 years ago

Short steps

  1. Click add a PGP key on webpage
  2. Paste my pubkey on the dialog
  3. Execute command from dialog
  4. curl finally says: curl: (52) Empty reply from server

Then I refreshed the webpage, no PGP key was shown on my page.

Also tried keybase id frantic1048 , I get ▶ ERROR (error 901) .

Then I repeated again above operation, at the curl step, I get

Error in your post
-------------------

Code: 908
Name: KEY_NEED_REVOKE
Description: You need to delete your active key before uploading a new one

It looks like my key is uploaded. But I can't find my key via webpage or keybase id

Long story

You can follow this log for extra information: https://keybase.io/frantic1048/sigchain

So far, everything looks good.

Then I found device key is a little superfluous for me, I want to manage my key like this -> https://keybase.io/alexmartin/graph .

curl gets:

Error in your post
-------------------

Code: 908
Name: KEY_NEED_REVOKE
Description: You need to delete your active key before uploading a new one

I've no idea why this happened. Then I revoked my old key, tried to add the new key. But I found I cannot add my new key as above Short steps described.

my keybase profile : https://keybase.io/frantic1048/ my log id: 099b2bfbabd736f18cb4321c

frantic1048 commented 8 years ago

I think there may be something worng with keybase, after I revoked my device...

maxtaco commented 8 years ago

It looks like you revoked all of your keys, one by one. We don't stop you from revoking your last key, which effectively locks your account. The only thing we can do now is to reset your account

maxtaco commented 8 years ago

BTW, can you post me a copy of your public key?

frantic1048 commented 8 years ago

Thanks for your response.

You mean revoking last key will cause such situation ?

At the beginning I just revoked my device key, and I didn't revoke PGP key. But the webpage says my PGP key need a verification, and I cannot make it done because of Code: 908 above wrotes.

It really helps resetting my account, here's my public key:

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2
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=eK5/
-----END PGP PUBLIC KEY BLOCK-----
maxtaco commented 8 years ago

OK, I reset your account....

frantic1048 commented 8 years ago

Thanks a lot!

I will add my key on my PC and cconfirm things work well, when I wake up. (I'm in UTC+8, it's 03:16 now… )

frantic1048 commented 8 years ago

Ok, now my account works well.

BTW, is there any info about why I cannot verify my pub key(The Code: 908), after I first time revoked device key?

mfonville commented 8 years ago

I have the same error. After removing my old GPG key and trying to add my new one I get using gpg and curl:

Error in your post
-------------------

Code: 908
Name: KEY_NEED_REVOKE
Description: You need to delete your active key before uploading a new one
hanyrax commented 8 years ago

@maxtaco Same problem here!! After revoking the expired key, I uploaded the new one but I can't sing it. What is the correct solution for that? Thanks!

Error in your post
-------------------

Code: 908
Name: KEY_NEED_REVOKE
Description: You need to delete your active key before uploading a new one
maxtaco commented 8 years ago

Go to the web site and select "remove key" in the gear dropdown on your profile page.

On Sun, Jul 24, 2016 at 12:11 PM, Hany Ragab notifications@github.com wrote:

@maxtaco https://github.com/maxtaco Same problem here!! After revoking the expired key, I uploaded the new one but I can't sing it. What is the proper solution for that? Thanks!

Error in your post

Code: 908 Name: KEY_NEED_REVOKE Description: You need to delete your active key before uploading a new one

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/keybase/keybase-issues/issues/2310#issuecomment-234785844, or mute the thread https://github.com/notifications/unsubscribe-auth/AA05_yItRrveFnubBdVrXaZ-wowbLoV6ks5qY47AgaJpZM4I-ZD6 .

maxtaco commented 8 years ago

Oh @hanyOne, I see, can you use the CLI to upload your new PGP public key? Try keybase pgp select

hanyrax commented 8 years ago

I've already tried that and I got this after finishing the whole procedure:

INFO Key was already up to date.

On my profile I still have the warning saying that I have to sign a statement with the new private key. schermata 2016-07-24 alle 20 03 25

maxtaco commented 8 years ago

Urg. And what happens if you click "revoke this public key"?

maxtaco commented 8 years ago

Hmm, something is up. According to my CLI your public key is fine.

maxtaco commented 8 years ago

If possible don't do anything and we'll take a look tomorrow.

maxtaco commented 8 years ago

oops, too late!

hanyrax commented 8 years ago

yeah

maxtaco commented 8 years ago

Did you do a keybase pgp drop?

hanyrax commented 8 years ago

yes, should I wait before trying to upload it again?

maxtaco commented 8 years ago

No, I'd say just try a keybase pgp select again and I'll look what happens.

hanyrax commented 8 years ago

looks a lot better! can you confirm that? On the website everything is fine now.

maxtaco commented 8 years ago

Yeah, everything looks good to me. What do you suppose got you into the original pickle? Did we allow you to upload an expired key?

hanyrax commented 8 years ago

No, I just revoked my expired key and generated (locally) a new one. Uploading it was fine, but when I got to the point where I have prove that I'm the owner via the curl command, it kept saying that I've already an active key connected to my account so I can't activate a new one before revoking the already "activated" key.

binamkayastha commented 7 years ago

I'm getting the same error too, but I dont' have a public key and never successfully added one.

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=iQb2
-----END PGP PUBLIC KEY BLOCK-----

Could you reset my account as well :) (sorry)

I think it happened cause when I tried to add my key initially, I got the password wrong