7e04c50a16
keyringctl: Add `persist_subkeys()` and `persist_subkey_revocations()` to persist the Public-Subkeys and the SubkeyRevocations of a root key out into a dedicated directory structure below the respective Public-Key. Change `persist_basic_key()` to not persist the Public-Subkeys and SubkeyRevocations of a root key anymore and to output debug information before writing to file. Change `convert_certificate()` to refer to Public-Subkeys and PublicSubkeyBinding as `subkeys` and `subkey_binding_sigs` (respectively) and to explicitly refer to the main certificate fingerprint when aggregating the data about them. Add `subkey_revocations` to track any SubkeyRevocations of a given Public-Subkey, so that it can be persisted to file.
Arch Linux Keyring
Repository for the Arch Linux keyring package.
Addition/Removal/Update of a packaging key
- Get the keyid from the bugreport in the keyring project
- Add the keyid to
packager-keyidsin alphabetic order, following this format: full size keyid, a tab, nickname.
Revoking a packager key
- Create a key removal task in the keyring project.
- Remove the keyid of the revoked user from
packager-keyids. - Add the removed keyid to
packager-revoked-keyids, in alphabetic order, following this format: full size keyid, a tab, nickname, a tab and reason of revocation.
Keyring release
- bump the version in the Makefile
- Run update-keys
- git add the new .asc file in the packager directory.
- Commit everything as 'Update keyring'
- Create a new tag
git tag -s $(date +"%Y%m%d") - Push changes
- Upload the source tarball with
make dist upload - Update the package