CondorCORE/condorcore-keyring
CondorCORE/condorcore-keyring
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Import all keys before cleaning them up

Browse Source
This commit is contained in:
Pierre Schmitz 2013-06-10 14:18:32 +02:00
parent 1e125e6ae4
commit 3e96a8f10f
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
update-keys
View File

@ -39,12 +39,13 @@ ${GPG} --import-ownertrust < archlinux-trusted 2>/dev/null
while read -ra data; do while read -ra data; do
keyid="${data[0]}" keyid="${data[0]}"
username="${data[@]:1}"
${GPG} --recv-keys ${keyid} &>/dev/null ${GPG} --recv-keys ${keyid} &>/dev/null
done < packager-keyids
while read -ra data; do
keyid="${data[0]}"
username="${data[@]:1}"
printf 'clean\nquit\ny\n' | \ printf 'clean\nquit\ny\n' | \
${GPG} --command-fd 0 --edit-key ${keyid} ${GPG} --command-fd 0 --edit-key ${keyid}
FD=$(mktemp)
exec 4>"${FD}"
if ! ${GPG} --list-keys --with-colons ${keyid} 2>/dev/null | grep -q '^pub:f:'; then if ! ${GPG} --list-keys --with-colons ${keyid} 2>/dev/null | grep -q '^pub:f:'; then
echo "key is not fully trusted: ${keyid} ${username}" echo "key is not fully trusted: ${keyid} ${username}"
else else
@ -58,8 +59,6 @@ while read -ra data; do
${GPG} --recv-keys ${keyid} &>/dev/null ${GPG} --recv-keys ${keyid} &>/dev/null
printf 'clean\nquit\ny\n' | \ printf 'clean\nquit\ny\n' | \
${GPG} --command-fd 0 --edit-key ${keyid} ${GPG} --command-fd 0 --edit-key ${keyid}
FD=$(mktemp)
exec 4>"${FD}"
if ! ${GPG} --list-keys --with-colons ${keyid} 2>/dev/null | grep -q '^pub:f:'; then if ! ${GPG} --list-keys --with-colons ${keyid} 2>/dev/null | grep -q '^pub:f:'; then
${GPG} --armor --no-emit-version --output packager-revoked/${username}.asc --export ${keyid} ${GPG} --armor --no-emit-version --output packager-revoked/${username}.asc --export ${keyid}
echo "${keyid}" >> archlinux-revoked echo "${keyid}" >> archlinux-revoked