CondorCORE/condorcore-keyring
CondorCORE/condorcore-keyring
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Revoke keys unconditionally

Browse Source
This commit is contained in:
Christian Hesse 2017-10-17 14:01:23 +02:00
parent e29bd5eb26
commit 6f00b281f1
1 changed files with 4 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
update-keys
View File

@ -44,12 +44,8 @@ while read -ra data; do
${GPG} --recv-keys ${keyid} &>/dev/null ${GPG} --recv-keys ${keyid} &>/dev/null
printf 'clean\nquit\ny\n' | \ printf 'clean\nquit\ny\n' | \
${GPG} --command-fd 0 --edit-key ${keyid} ${GPG} --command-fd 0 --edit-key ${keyid}
if ! ${GPG} --list-keys --with-colons ${keyid} 2>/dev/null | grep -q '^pub:f:'; then
${GPG} --armor --no-emit-version --export-options export-minimal --export ${keyid} >> master-revoked/${username}.asc ${GPG} --armor --no-emit-version --export-options export-minimal --export ${keyid} >> master-revoked/${username}.asc
echo "${keyid}" >> archlinux-revoked echo "${keyid}" >> archlinux-revoked
else
echo "key is still fully trusted: ${keyid} ${username}"
fi
done < master-revoked-keyids done < master-revoked-keyids
while read -ra data; do while read -ra data; do
@ -74,12 +70,8 @@ while read -ra data; do
${GPG} --recv-keys ${keyid} &>/dev/null ${GPG} --recv-keys ${keyid} &>/dev/null
printf 'clean\nquit\ny\n' | \ printf 'clean\nquit\ny\n' | \
${GPG} --command-fd 0 --edit-key ${keyid} ${GPG} --command-fd 0 --edit-key ${keyid}
if ! ${GPG} --list-keys --with-colons ${keyid} 2>/dev/null | grep -q '^pub:f:'; then
${GPG} --armor --no-emit-version --export-options export-minimal --export ${keyid} >> packager-revoked/${username}.asc ${GPG} --armor --no-emit-version --export-options export-minimal --export ${keyid} >> packager-revoked/${username}.asc
echo "${keyid}" >> archlinux-revoked echo "${keyid}" >> archlinux-revoked
else
echo "key is still fully trusted: ${keyid} ${username}"
fi
done < packager-revoked-keyids done < packager-revoked-keyids
cat master/*.asc master-revoked/*.asc packager/*.asc packager-revoked/*.asc > archlinux.gpg cat master/*.asc master-revoked/*.asc packager/*.asc packager-revoked/*.asc > archlinux.gpg