10

I am looking for an open-source PGP key server for Linux. It will be run as a private server, i.e. only accessible to a limited group of users.

My google searches have turned up lots of public key servers. But the only source code I could find is OpenPGP Public Key Server which is quite old.

Any better suggestions? I'm happy to use a bigger software package (somethign like Zimbra) if it has PGP key server support.

7

There is a bunch of open source OpenPGP key server implementations.

SKS and Hockeypuck use a more efficient set reconciliation protocol to synchronize with each other, PKS uses a less efficient approach. Both SKS and hockeypuck can be configured to also synchronize with PKS key servers using the old protocol.

Setting up PKS is a hassle. SKS is a little bit better, especially if readily packaged in your distribution. I recently set up a hockeypuck instance and really liked it. Clean software, well documented (although rather new) and a nice relational backend which you can easily have a look, no Berkley DB or similar hard-to-query stuff.

  • If I understand correctly, Debian team officially provides a package for SKS. This package is (obviously) also available in Ubuntu. – Franklin Yu Aug 15 '19 at 14:23
2

Another one is Mailvelope Key Server. Described as "A simple OpenPGP public key server that validates email address ownership of uploaded keys."

License: AGPL v3.0

  • I would really love if this was a valid option for self-hosting, but it's clearly not intended for production use by anyone but Mailvelope themselves. Even if they do provide instructions on how to deploy their code. Not only do lots of the links and textual elements assume they are being hosted at mailvelope.com, but their master branch is almost always broken. I have been very disappointed by mailvelope. – William Rosenbloom yesterday

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.