I can't add my GPG Key

[Leon Rowland]

Was great to see that the GPG Key feature was added to Bitbucket Cloud, but it appears I can't add my public key.

I am guessing its because it has multiple uids? I use 1 Yubikey for Personal and Business requirements, and as such I have multiple UIDs on my key.

When I try to add the key to my business user, it gives me the error:

"The GPG key is not associated with your email address."

But it does have an ID of the user I am logged in with. It wont be hard to find my key, but you are free to see my public key from my github: https://github.com/zogot.gpg

There is support for not just assuming the primary identity is the only identity on the key is there?

[Leon Rowland · Accepted solution]

Back from vacation today, and I see I can now add the same GPG key I tried before. I'm guessing some bugfix was done.

[Mark C]

Hi @Leon Rowland

Welcome to the community.

I believe it is a requirement that a GPG key should generated with a Bitbucket Cloud account's email address. - Use GPG keys to sign commits

Would you be able to confirm if that's the case on your end?

Regards,
Mark C

[Leon Rowland]

Unfortunately this won't be the case. I have a GPG Key on my Yubikey that I use for other reasons as well as my employment.

It is very unfortunate that it doesn't let me register the public key. Is there even a reason why it would need to check? Surely any public key added to my account would be fine.

It's a shame it takes more than 12 years to get this feature and then it assumes that no-one will have a GPG key in those 12 years for other purposes.

I would love to see this opened up and implemented in a way that supports common use cases of people with existing keys and multiple identities

[Mark C]

Hi @Leon Rowland

It is possible to use an existing GPG key for Bitbucket Cloud.

Could you confirm if you've tried adding it using the `gpg --edit-key` command locally?
If not yet, you can try it by using the commands below:

gpg --edit-key <keyid>

Please ensure that this key also has a secret key; otherwise, we will not be able to edit it. This will open a new prompt with GPG.
Next, we can enter the command 'adduid' and provide the name, email address, and comments before proceeding to save.

Regards,
Mark C