guardianproject/Gibberbot — Issue #111: gibberbot/otr4j needs to read/write remote key fingerprints from the file store 
Author: eighthave
Created: 2012-02-17 22:05:42+00:00
State: open

gibberbot/otr4j stores the whole public key of remote contacts and uses that for verifying whether a contact's key has been seen before and whether its verified. libotr-based apps like Pidgin and Adium only store the fingerprint of the remote public key. So that means its currently not possible to convert a libotr otr.fingerprints file to a file that otr4j can use since you cannot generate the public key when you only have the fingerprint.

Therefore, gibberbot/otr4j should store both the fingerprint and the public key for each known contact, and it should also read both the fingerprint and the public key from the file. If the fingerprint or public key does not exist in the file, gibberbot/otr4j should be able to operate with only one piece of info. Having the fingerprint alone is enough to know whether a given contact has been seen before and whether it has been manually or SMP verified.

Even though libotr does not store the remote public keys, having those public keys stored could be useful for future features like signing OTR keys with OpenPGP.

There are example key files for many apps here:
https://github.com/guardianproject/otrfileconverter/tree/master/tests