Compare commits

...

14 Commits

Author SHA1 Message Date
62646e219b Add revocation for dvzrv
Add revocation certificate for C7E7849466FE2358343588377258734B41C31549.
2023-05-29 13:33:19 +02:00
68dbb8014a Switch advertized key for dvzrv
Switch advertized key from C7E7849466FE2358343588377258734B41C31549 to
991F6E3F0765CF6295888586139B09DA5BF0D338, as the latter superseded the
former.
2023-05-29 13:33:14 +02:00
a6c89532b1 Add authentication subkey for dvzrv
Add authentication subkey 57B71EE573F78CBEA83284B0D0B9A7F0EFEC1108 for
C7E7849466FE2358343588377258734B41C31549.
2023-05-29 13:33:10 +02:00
75b363ac6c Add certification from dvzrv for dvzrv
Add signature by 991F6E3F0765CF6295888586139B09DA5BF0D338
on C7E7849466FE2358343588377258734B41C31549 for
"David Runge <dvzrv@archlinux.org>".
2023-05-29 13:33:05 +02:00
f4ad2ed61a Add signature from Foxboron for dvzrv 2023-05-29 13:32:56 +02:00
ddc037fa33 Simplify trust_color() using match statement 2023-05-29 13:32:50 +02:00
f6d2b35318 Fix issue with Trust Enum values
As `auto()` was not used for `Trust.unknown` it led to wrong data being
returned from `trust_color()`.
2023-05-29 13:18:51 +02:00
cd9536f76a Revoke signature by demize for allan
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2023-05-11 10:29:36 +02:00
f7749fd39c Add signature from anthraxx for gromit
Signed-off-by: Levente Polyak <anthraxx@archlinux.org>
2023-05-02 21:14:05 +02:00
fcbb3d5586 Add signature from Bluewind for gromit
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2023-05-02 12:13:45 +02:00
35ad10dd01 Add signature from dvzrv for gromit 2023-05-01 13:44:42 +02:00
771c202291 Add signature from demize for gromit
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2023-05-01 13:34:10 +02:00
4bab3c715d add packager key for gromit
Signed-off-by: Christian Heusel <christian@heusel.eu>
2023-04-30 17:36:41 +02:00
29d9caa9dc Collect failed keys and print them at the end
Since !180, all keys are tried. This can indeed be useful but buries
the offending key in a long output log.

This stores a message containing the key and UID during processing and
prints them all at the end.
2023-03-20 16:24:49 +01:00
20 changed files with 180 additions and 22 deletions

View File

@ -132,7 +132,7 @@ Christian Hesse <eworm@archlinux.org>
02FD 1C7A 934E 6145 4584 9F19 A623 4074 498E 9CEE
David Runge <dvzrv@archlinux.org>
C7E7 8494 66FE 2358 3435 8837 7258 734B 41C3 1549
991F 6E3F 0765 CF62 9588 8586 139B 09DA 5BF0 D338
Pierre Schmitz <pierre@archlinux.org>
4AA4 767B BC9C 4B1D 18AE 28B7 7F2D 434B 9741 E8AC

View File

@ -1,7 +0,0 @@
-----BEGIN PGP SIGNATURE-----
wnUEEBYKAB0WIQRp5kceOuBlKXUpgy5roPWiA39PQQUCY43bIgAKCRBroPWiA39P
QbXDAP9u0kdh28tdAGn5CWOJNvOJBUz7Z86B/JUWfOKmDEuIGgD8C3jWlt+Jpenb
K1nNOLl/qu9V/XfYj7nruWm2zH0ltg0=
=MVjl
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,7 @@
-----BEGIN PGP SIGNATURE-----
wngEMBYKACAWIQRp5kceOuBlKXUpgy5roPWiA39PQQUCZDpx2gIdAAAKCRBroPWi
A39PQf7eAP0RLlX7qSVgFT/BJHUQ1TLgSGwnuJ46ZtbdY4xcOm26bgEA3re2oB9G
ifQ7ftsmDeqLRMRQ8at6dvtdpxsVOYVzxw0=
=0F2P
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,7 @@
-----BEGIN PGP SIGNATURE-----
wngEIBYIACAWIQTH54SUZv4jWDQ1iDdyWHNLQcMVSQUCYnltNQIdAwAKCRByWHNL
QcMVSRBZAQCHwoMtoSpUEwy+MkP1waEE3k2WlwDXQoo/9FwzTFxz5wD9EXQtSlz5
0nAUHeAVGH7aUuxlSsfC58+kJ0ZqwkEv3AA=
=pI72
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,6 @@
-----BEGIN PGP ARMORED FILE-----
zjMEXzjyGhYJKwYBBAHaRw8BAQdAlC/1ysofcEnEhTtUnu/0z1UuAfbzL3r4K+tH
+ZZpuiQ=
=FnQP
-----END PGP ARMORED FILE-----

View File

@ -0,0 +1,7 @@
-----BEGIN PGP SIGNATURE-----
wn4EGBYIACYWIQTH54SUZv4jWDQ1iDdyWHNLQcMVSQUCXzjyGgIbIAUJBd7uAAAK
CRByWHNLQcMVSeUGAP0WfArOzkxd4gHR4inXNCxZjvNSOlvMetR5knp8unMElQEA
8zwv/pcyva/OKoQ+fzUUokFAPbV7OcXmqLiInCvWTAw=
=O198
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,7 @@
-----BEGIN PGP SIGNATURE-----
wnUEExYKAB0WIQSZH24/B2XPYpWIhYYTmwnaW/DTOAUCYno0+wAKCRATmwnaW/DT
OE5uAP9+xvb8/oqmh2UxW32sRmRz42GuGf3KatBH1D1WlYXz3QD/coRmCwXFvBCP
lEhU5DFPDrsI/U+pNz0F1uWdCsM94Qc=
=Z+gq
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----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=mOF3
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,15 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----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=r57o
-----END PGP PUBLIC KEY BLOCK-----

View File

@ -0,0 +1,15 @@
-----BEGIN PGP ARMORED FILE-----
zsFNBGROfz8BEACvItviAcw6SSm2S9AFKF74GGxXiLNgr0qjOY0Eard+yC65PSBr
P51AaBf83lr3IORZbDDY+7LX/EHypO9qEgI1Rq1/RMh8veK0l2cp9uD2ZgZz+rA1
CTaUgBFmWASX2+Yt6MPfLaziSbmmeNW0Q+2bcIy6GzfTMLGcu5ep+daStRs9+kRO
fQTerMpZUt+9EKvyEEDHU+wwHEHzEobVE3dDdZiPyciDQW2Fp+12/jxM9VaFZPaO
9KXdD8dpeWzJ23JhOTLXA5H47QZS7sJCHZ/tSe0Lbe6boeiDJeI/285+5d+g7+pZ
7XvBhzOXgtVDI4XicRikaUEFbr+x/9EQFV7EDZI03E0Iyf8vJvglJ4+omGN6/Wv/
j18nwin0IoRZNwIF/2CzGzQf9wCfUsHS9bwbY6wx3xeVlvlY6Md3k29AJwwJ7Ame
0IemzS6eAYVUp5z+9Scr/69UaebvHJYaUWnnt+AC8dCrcdak9KJEJS1iQGysMkoY
7a5XuN+3u93GUxEtwMtZoiN0J3KRSktoN0Occc/A23xQhVM7QGSYkgqQV1DMWalE
piJET7sel6TwVYdKvd0Fo3YFJu0Sp4wHKCqNWFH7kcoiXoovJps07iLZqAo3G8SM
OKig4Df6aetaWDCF2/2Wre2DoA73+Ss/XlRObEs8DT9QMawnsxIbCGPk3QARAQAB
=vxwe
-----END PGP ARMORED FILE-----

View File

@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----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=
=Xx5W
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,6 @@
-----BEGIN PGP ARMORED FILE-----
zT1DaHJpc3RpYW4gSGV1c2VsIChncm9taXQgcGFja2FnZXIga2V5KSA8Z3JvbWl0
QGFyY2hsaW51eC5vcmc+
=vRLx
-----END PGP ARMORED FILE-----

View File

@ -0,0 +1,7 @@
-----BEGIN PGP SIGNATURE-----
wnUEEBYKAB0WIQQqwKQu+wtcvHoEAu1NyVtte+mJLgUCZE+lcQAKCRBNyVtte+mJ
Ll4vAQCVdv29Vw8zoAHX9wAbZ380p5NzPS9AUsyjr1ngyvTvzAEApNtLX3uuknHL
U3i9pqKzk2TAdteuMrEaeTi55hr02wI=
=mk6L
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,7 @@
-----BEGIN PGP SIGNATURE-----
wnUEEBYKAB0WIQRp5kceOuBlKXUpgy5roPWiA39PQQUCZE+irQAKCRBroPWiA39P
QYmkAQC/p1X6eeBMrKXcGWB/Ght+ybVDzVD7s1yzMW/62OkE4gD8CaDb0BlB8s0+
d7raMm4Pku+SmC9hYilG2T7c08m2egQ=
=AOdS
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----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=nufN
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,16 @@
-----BEGIN PGP SIGNATURE-----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=2p4V
-----END PGP SIGNATURE-----

View File

@ -0,0 +1,17 @@
-----BEGIN PGP SIGNATURE-----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=suVO
-----END PGP SIGNATURE-----

View File

@ -224,16 +224,13 @@ def trust_color(trust: Trust) -> Color:
-------
The color representing the passed trust status
"""
color: Color = Color.RED
if trust == Trust.revoked:
color = Color.RED
if trust == Trust.unknown:
color = Color.YELLOW
if trust == Trust.marginal:
color = Color.YELLOW
if trust == Trust.full:
color = Color.GREEN
return color
match trust:
case Trust.full:
return Color.GREEN
case Trust.unknown | Trust.marginal:
return Color.YELLOW
case _:
return Color.RED
def format_trust_label(trust: Trust) -> str:

View File

@ -11,7 +11,7 @@ PacketKind = NewType("PacketKind", str)
class Trust(Enum):
unknown = auto
unknown = auto()
revoked = auto()
marginal = auto()
full = auto()

View File

@ -42,7 +42,6 @@ gpg_locate_external=(
fingerprint_mboxes="$(
gpg --homedir "$homedir" --no-permission-warning --list-keys --list-options show-only-fpr-mbox
)"
error=0
# a list of <fingerprints> of all revoked keys and keys that have no valid main
# key signatures
@ -56,16 +55,20 @@ if (( EUID != 0 )); then
exit 1
fi
errors=()
# first update the main signing keys, then the packager keys
for domain_match in "$main_key_domain_match" "$packager_domain_match"; do
while read -ra fpr_email; do
if [[ ${fpr_email[1]} =~ $domain_match && ! "$old_fingerprints" =~ ${fpr_email[0]} && ! "${invalid_fingerprints[*]}" =~ ${fpr_email[0]} ]]; then
printf "Refreshing key %s with UID %s...\n" "${fpr_email[0]}" "${fpr_email[1]}"
"${gpg_locate_external[@]}" "${fpr_email[1]}" || let ++error
if ! "${gpg_locate_external[@]}" "${fpr_email[1]}"; then
errors+=("Error refreshing key ${fpr_email[0]} with UID ${fpr_email[1]}.")
fi
else
printf "Skipping key %s with UID %s...\n" "${fpr_email[0]}" "${fpr_email[1]}"
fi
done <<< "$fingerprint_mboxes"
done
exit ${error}
>&2 printf "%s\n" "${errors[@]}"
exit ${#errors[@]}