From bc8583f247898a1fa45f6de834d34b335ab1952c Mon Sep 17 00:00:00 2001
From: Werner Koch <wk@gnupg.org>
Date: Fri, 3 Oct 2014 15:05:47 +0200
Subject: [PATCH] gpg: Allow creating a cert-only primary key.

* g10/keygen.c (ask_key_flags): Allow a 'c' in direct entry.
--

GnuPG-bug-id: 1726
---
 g10/keygen.c | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/g10/keygen.c b/g10/keygen.c
index 17d7ce121..229f2bfed 100644
--- a/g10/keygen.c
+++ b/g10/keygen.c
@@ -1718,6 +1718,13 @@ ask_key_flags(int algo,int subkey)
                 current |= PUBKEY_USAGE_ENC;
               else if ((*s == 'a' || *s == 'A') && (possible&PUBKEY_USAGE_AUTH))
                 current |= PUBKEY_USAGE_AUTH;
+              else if (!subkey && *s == 'c')
+                {
+                  /* Accept 'c' for the primary key because USAGE_CERT
+                     will will be set anyway.  This is for folks who
+                     want to experiment with a cert-only primary key.  */
+                  current |= PUBKEY_USAGE_CERT;
+                }
             }
           break;
         }