[PLUG] gpg errors and confusion

[Jeff Abrahamson <jeff@purple.com>]

Sending encrypted and signed mail, I get the following two errors.
Google hasn't helped me understand why. Maybe someone here can. I'd be
grateful.


First, upon selecting a public key to encrypt to, I get

  ID has undefined validity. Do you really want to use the key? ([no]/yes):

I respond yes, but I'm not clear why I get this message.


Then, when mutt is having gpg do the encryption (I gather), I get the
following (for example):

  gpg: using secondary key 5818771B instead of primary key 52AC566B
  gpg: No trust check due to --always-trust option
  gpg: writing to `-'
  gpg: ELG-E/AES encrypted for: "5818771B Michael C. Toren (MCT) <mct@toren.net>"
  gpg: DSA signature from: "0D1DAE4B Jeff Abrahamson <jeff@purple.com>"

My mutt config does specify --always-trust, but I don't think I've
changed that, I think I just grabbed it from some mutt release
somewhere.



Finally, when I read my own mail, I see the following:

[-- PGP output follows (current time: Wed 25 Dec 2002 01:15:25 PM EST) --]
gpg: Signature made Wed 25 Dec 2002 12:01:42 PM EST using DSA key ID 0D1DAE4B
gpg: Good signature from "Jeff Abrahamson <jeff@purple.com>"
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 1A1A BA95 D082 A558 A276  63C6 16BF 8C4C 0D1D AE4B
[-- End of PGP output --]

But I did sign my own key:

  jeff@asterix:Mutt $ gpg --list-sigs jeff@purple   
  pub  1024D/0D1DAE4B 2002-05-02 Jeff Abrahamson <jeff@purple.com>
  sig 3       0D1DAE4B 2002-05-02   Jeff Abrahamson <jeff@purple.com>
  sig 2   P   99242560 2002-12-25   David M. Shaw <dshaw@jabberwocky.com>
  sig         80675E65 2002-12-20   Leonard D. Rosenthol <leonardr@rogue-admins.com>
  sig         A7EDFD2F 2002-12-20   T. Eugene Smiley <eugene@esmiley.net>
  sub  2048g/29595FCD 2002-05-02
  sig         0D1DAE4B 2002-05-02   Jeff Abrahamson <jeff@purple.com>

  jeff@asterix:Mutt $ 

Do I need to specify something else to trust myself?


Thanks much for any enlightenment (or steps towards).

-- 
 Jeff

 Jeff Abrahamson  <http://www.purple.com/jeff/>
 GPG fingerprint: 1A1A BA95 D082 A558 A276  63C6 16BF 8C4C 0D1D AE4B

Attachment: pgpkWjGvIKfaj.pgp
Description: PGP signature