CondorCORE/condorcore-keyring
CondorCORE/condorcore-keyring
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Use minimal export for revoked keys

Browse Source 
We need the key and most recent self signature.

Signed-off-by: Christian Hesse <mail@eworm.de>
This commit is contained in:
Christian Hesse 2017-10-17 12:00:13 +02:00
parent 1c4f33d735
commit 8e8d330967
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
update-keys
View File

@ -45,7 +45,7 @@ while read -ra data; do
printf 'clean\nquit\ny\n' | \ printf 'clean\nquit\ny\n' | \
${GPG} --command-fd 0 --edit-key ${keyid} ${GPG} --command-fd 0 --edit-key ${keyid}
if ! ${GPG} --list-keys --with-colons ${keyid} 2>/dev/null | grep -q '^pub:f:'; then if ! ${GPG} --list-keys --with-colons ${keyid} 2>/dev/null | grep -q '^pub:f:'; then
${GPG} --armor --no-emit-version --export ${keyid} >> master-revoked/${username}.asc ${GPG} --armor --no-emit-version --export-options export-minimal --export ${keyid} >> master-revoked/${username}.asc
echo "${keyid}" >> archlinux-revoked echo "${keyid}" >> archlinux-revoked
else else
echo "key is still fully trusted: ${keyid} ${username}" echo "key is still fully trusted: ${keyid} ${username}"
@ -75,7 +75,7 @@ while read -ra data; do
printf 'clean\nquit\ny\n' | \ printf 'clean\nquit\ny\n' | \
${GPG} --command-fd 0 --edit-key ${keyid} ${GPG} --command-fd 0 --edit-key ${keyid}
if ! ${GPG} --list-keys --with-colons ${keyid} 2>/dev/null | grep -q '^pub:f:'; then if ! ${GPG} --list-keys --with-colons ${keyid} 2>/dev/null | grep -q '^pub:f:'; then
${GPG} --armor --no-emit-version --export ${keyid} >> packager-revoked/${username}.asc ${GPG} --armor --no-emit-version --export-options export-minimal --export ${keyid} >> packager-revoked/${username}.asc
echo "${keyid}" >> archlinux-revoked echo "${keyid}" >> archlinux-revoked
else else
echo "key is still fully trusted: ${keyid} ${username}" echo "key is still fully trusted: ${keyid} ${username}"