Send patches - preferably formatted by git format-patch - to patches at archlinux32 dot org.
summaryrefslogtreecommitdiff
path: root/update-keys
diff options
context:
space:
mode:
authorErich Eckner <git@eckner.net>2019-12-30 23:53:42 +0100
committerErich Eckner <git@eckner.net>2019-12-30 23:53:42 +0100
commita1ffe928350a6c1c3be1fa4750f86f1c8f05e3a6 (patch)
tree3303a098f125f48893edb729727e11480f037dea /update-keys
parent0661f905548c4aa2f01926cad6dcb5f9d231f0c5 (diff)
update-keys: master-revoked new
Diffstat (limited to 'update-keys')
-rwxr-xr-xupdate-keys20
1 files changed, 17 insertions, 3 deletions
diff --git a/update-keys b/update-keys
index 8f985f5..c6e730c 100755
--- a/update-keys
+++ b/update-keys
@@ -24,8 +24,8 @@ Expire-Date: 0
%echo Done
EOF
-rm -rf master packager packager-revoked archlinux32-trusted archlinux32-revoked
-mkdir master packager packager-revoked
+rm -rf master master-revoked packager packager-revoked archlinux32-trusted archlinux32-revoked
+mkdir master master-revoked packager packager-revoked
while read -ra data; do
keyid="${data[0]}"
@@ -71,6 +71,20 @@ while read -ra data; do
fi
done < packager-revoked-keyids
-cat master/*.asc packager/*.asc packager-revoked/*.asc > archlinux32.gpg
+while read -ra data; do
+ keyid="${data[0]}"
+ username="${data[2]}"
+ ${GPG} --recv-keys ${keyid} &>/dev/null
+ printf 'clean\nquit\ny\n' | \
+ ${GPG} --command-fd 0 --edit-key ${keyid}
+ if ! ${GPG} --list-keys --with-colons ${keyid} 2>/dev/null | grep -q '^pub:f:'; then
+ ${GPG} --armor --no-emit-version --export ${keyid} >> master-revoked/${username}.asc
+ echo "${keyid}" >> archlinux32-revoked
+ else
+ echo "key is still fully trusted: ${keyid} ${username}"
+ fi
+done < master-revoked-keyids
+
+cat master/*.asc master-revoked/*.asc packager/*.asc packager-revoked/*.asc > archlinux32.gpg
popd >/dev/null