How do you use netpgp

[yarl-baudig%mailoo.org@localhost]

Hi,
I tried to 'pkg_admin fetch-pkg-vulnerabilities -s' and got "can't read 
'/root/.gnupg/pubring.gpg'pkg_admin: cannot read keyring: No such file 
or directory".
I got http://pkgsrc.org/pkgsrc-security_pgp_key.asc and while 'man 
netpgpkeys' states "Other key management utilities should be used in 
preference to this one", I tried 'netpgpkeys --import-key 
pkgsrc-security_pgp_key.asc 
--homedir=_previously_created_using_netpgpkeys--generate-key_' and it 
failed verbosely:

/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../d
ist/src/lib/packet-parse.c:1793: PGP_E_PROTO_UNKNOWN_SS, Unknown 
signature subpacket
 type (54)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../d
ist/src/lib/packet-parse.c:1793: PGP_E_PROTO_UNKNOWN_SS, Unknown 
signature subpacket
 type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../d
ist/src/lib/packet-parse.c:1793: PGP_E_PROTO_UNKNOWN_SS, Unknown 
signature subpacket
 type (57)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../d
ist/src/lib/packet-parse.c:1793: PGP_E_PROTO_UNKNOWN_SS, Unknown 
signature subpacket
 type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../d
ist/src/lib/packet-parse.c:410: PGP_E_P_NOT_ENOUGH_DATA, Not enough data
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../d
ist/src/lib/packet-parse.c:1793: PGP_E_PROTO_UNKNOWN_SS, Unknown 
signature subpacket
 type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:410: 
PGP_E_P_NOT_ENOUGH_DATA, Not enough data
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (54)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (57)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:410: 
PGP_E_P_NOT_ENOUGH_DATA, Not enough data
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:410: 
PGP_E_P_NOT_ENOUGH_DATA, Not enough data
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (54)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
Cannot import key from file pkgsrc-security_pgp_key.asc

I then tried with 'gpg --import'. I can now get 
http://cdn.netbsd.org/pub/NetBSD/packages/vulns/pkg-vulnerabilities.bz2, 
bunzip2 it and 'gpg --verify' it. But if I try 'netpgp --verify', I get:
Can't free 545 (0x221)
Can't free 566 (0x236)
Error: Subpacket too long
Can't free 545 (0x221)
Can't free 545 (0x221)
Error: Subpacket too long
Can't free 545 (0x221)
Can't free 545 (0x221)
Can't free 569 (0x239)
Error: Subpacket too long
Can't free 545 (0x221)
Can't free 566 (0x236)
Error: Subpacket too long
Can't free 545 (0x221)
Can't free 545 (0x221)
Error: Subpacket too long
Can't free 545 (0x221)
Can't free 545 (0x221)
Can't free 569 (0x239)
Error: Subpacket too long
Can't free 545 (0x221)
Can't free 566 (0x236)
Error: Subpacket too long
Can't read pubring /root/.gnupg/pubring.gpg
Can't read pub keyring
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (54)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (57)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:410: 
PGP_E_P_NOT_ENOUGH_DATA, Not enough data
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:410: 
PGP_E_P_NOT_ENOUGH_DATA, Not enough data
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (54)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (57)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:410: 
PGP_E_P_NOT_ENOUGH_DATA, Not enough data
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:410: 
PGP_E_P_NOT_ENOUGH_DATA, Not enough data
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (54)
/mnt/stripped/builder/git/netbsd-8/src/crypto/external/bsd/netpgp/lib/netpgp/../../dist/src/lib/packet-parse.c:1793: 
PGP_E_PROTO_UNKNOWN_SS, Unknown signature subpacket type (33)
can't initialise

'netpgpverify':

Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Ignoring unusual/reserved signature subpacket 33
Signature did not match contents -- Signature key id 706b677372632d73 
not found

Now the problem is that pkg_admin fetch-pkg-vulnerabilities (or 
check-pkg-vulnerabilities) with the -s option does use libnetpgpverify 
and I got the same output.

I saw thread on the ML involving Alistair Crooks and Pierre Pronchery 
more or less relating to this.
What now?

Thanks.