CondorCORE/condorcore-keyring
CondorCORE/condorcore-keyring
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

try all keys, fail at the end for wkd sync

Browse Source 
This makes sure all keys are tried at least, instead of failing with the
first error.

Fixes #202
This commit is contained in:
Christian Hesse 2022-11-04 14:52:18 +01:00
parent 14e5f42c38
commit 30b8fa1653
No known key found for this signature in database
GPG Key ID: 6D42BDD116E0068F
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
wkd_sync/archlinux-keyring-wkd-sync
View File

@ -37,6 +37,7 @@ gpg_locate_external=(
fingerprint_mboxes="$( fingerprint_mboxes="$(
gpg --homedir "$homedir" --no-permission-warning --list-keys --list-options show-only-fpr-mbox gpg --homedir "$homedir" --no-permission-warning --list-keys --list-options show-only-fpr-mbox
)" )"
error=0
# a list of <fingerprints> of all revoked keys and keys that have no valid main # a list of <fingerprints> of all revoked keys and keys that have no valid main
# key signatures # key signatures
@ -55,9 +56,11 @@ for domain_match in "$main_key_domain_match" "$packager_domain_match"; do
while read -ra fpr_email; do while read -ra fpr_email; do
if [[ ${fpr_email[1]} =~ $domain_match && ! "$old_fingerprints" =~ ${fpr_email[0]} ]]; then if [[ ${fpr_email[1]} =~ $domain_match && ! "$old_fingerprints" =~ ${fpr_email[0]} ]]; then
printf "Refreshing key %s with UID %s...\n" "${fpr_email[0]}" "${fpr_email[1]}" printf "Refreshing key %s with UID %s...\n" "${fpr_email[0]}" "${fpr_email[1]}"
"${gpg_locate_external[@]}" "${fpr_email[1]}" "${gpg_locate_external[@]}" "${fpr_email[1]}" || let ++error
else else
printf "Skipping key %s with UID %s...\n" "${fpr_email[0]}" "${fpr_email[1]}" printf "Skipping key %s with UID %s...\n" "${fpr_email[0]}" "${fpr_email[1]}"
fi fi
done <<< "$fingerprint_mboxes" done <<< "$fingerprint_mboxes"
done done
exit ${error}