[Bug 448640] [NEW] Unwanted private key revocation

[Michael Düll]

Public bug reported:

Binary package hint: seahorse

When double-clicking on a revocation certificate of a private key (saved to disk in case the private key is not save anymore / one forgets the key's password), seahorse will automatically revoke that private key without first asking: Are you sure.
I today accidentially revoked my main PGP key that way. This should not happen. Seahorse should as first!

Steps to reproduce:

1) Create a new gpg key. (Lets say it's AABBCCDD)
2) gpg --gen-revoke AABBCCDD
3) copy the revocation certificate to a text file (revk_cert_AABBCCDD.txt) so that it looks like:

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: A revocation certificate should follow

foObArfOofoObArfOofoObArfOofoObArfOofoObArfOofoObArfOofoObArfOofoObArfOofoObArfOo
foObArfOofoObArfOofoObArfOofoObArfOofoObArfOofoObArfOo/d
=FooBa
-----END PGP PUBLIC KEY BLOCK-----

4) Have seahorse-plugins installed
5) Accidentially double-click on revk_cert_AABBCCDD.txt
6) Your key is gone!

This should not happen. Between 5) and 6) there should be a confirmation
dialog.

ProblemType: Bug
Architecture: amd64
Date: Sun Oct 11 13:50:44 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/bin/seahorse
Package: seahorse 2.28.0-0ubuntu1
ProcEnviron:
 LANG=de_DE.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-13.43-generic
SourcePackage: seahorse
Uname: Linux 2.6.31-13-generic x86_64

** Affects: seahorse (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug

-- 
Unwanted private key revocation
https://bugs.launchpad.net/bugs/448640
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs