How to list trust level of OpenPGP public keys in GnuPG

gnupgopenpgppublic-keytrust

While I can determine the trust level I have placed on an individual OpenPGP public key by using the --edit-key command, is there a simple way to list all the public keys along with their trust levels from the command line?

Best Answer

You can export all configured owner trust through gpg --export-ownertrust. The output is of the form

FINGERPRINT:TRUST:

For my own key (which has ultimate trust on my machine), there is following line included:

0D69E11F12BDBA077B3726AB4E1F799AA4FF2279:6:

It seems the trust level is corresponds to the number entered in the trust edit command plus one:

1 = I don't know or won't say (export: 2)
2 = I do NOT trust            (export: 3)
3 = I trust marginally        (export: 4)
4 = I trust fully             (export: 5)
5 = I trust ultimately        (export: 6)

The output of this command can also be imported again through gpg --import-ownertrust.

What Went Wrong

You're dealing with two problems:

gpg --search-keys searches keyservers, not locally. Use gpg --list-keys instead.
GnuPGs keyserver domain is keys.gnupg.net, not keys.gpugp.net (typo). Additionally, you have to prefix a protocol, hkp:// is supported by most keyservers.

Relevant Commands for Exchanging Keys

gpg --send-keys [keyid]: Send key id to a keyserver
gpg --recv-keys [keyid]: Fetch key id from a keyserver
gpg --search-keys [needle]: Search for keys on a keyserver that contain "needle", eg. in a UID
gpg --list-keys [needle]: List all local keys that contain "needle", eg. in a UID

To select another keyserver than the default one configured, use --keyserver [URI]. Make sure to use a complete and valid URI like hkp://pool.sks-keyservers.net, or hkp://keys.gnupg.net (which actually refers to the SKS keyserver pool ourdays).

Linux – GnuPG / OpenGPG: Recovering public key from private key

"Recovering" Public Keys in OpenSSH

ssh-keygen -y does not actually recover the public key, but just reads it from the private key, where it is always attached if stored in OpenSSH format.

"Recovering" Public Keys in OpenPGP

Similar for OpenPGP: if exported in an OpenPGP-compliant way, the private key will always contain the public key - import it on a computer you own and trust, and export the public key afterwards. With GnuPG, do something like:

gpg --import [private-key-file]
gpg --export [key-id]

gpg --export will by default only export the public key.

Where the Public Key Also Might be Found

If you shared the public key, chances are high you either find it on public key servers (eg., http://pgp.mit.edu) or some friend of you has it on his computer (where he can easily gpg --export it).