diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 09:19:41 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 09:19:41 +0000 |
commit | a27c8b00ebf173659f22f53ce65679e94e7dfb1b (patch) | |
tree | 02c68ec259348b63c6328896aa73265eb7b3d730 /t/no-revoked.t | |
parent | Initial commit. (diff) | |
download | debian-keyring-upstream.tar.xz debian-keyring-upstream.zip |
Adding upstream version 2022.12.24.upstream/2022.12.24upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 't/no-revoked.t')
-rwxr-xr-x | t/no-revoked.t | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/t/no-revoked.t b/t/no-revoked.t new file mode 100755 index 0000000..efd90b0 --- /dev/null +++ b/t/no-revoked.t @@ -0,0 +1,22 @@ +#!/bin/sh +# Looks for revoked keys in our active keyrings +set -e + +find_revoked () { + k=$1 + gpg --no-options --no-auto-check-trustdb --no-default-keyring \ + --keyring "./output/keyrings/$k" --list-keys --with-colons \ + | grep -a '^pub' \ + | awk -F: -v keyring=$1 \ + 'BEGIN { ok = 1 } \ + $2 == "r" {print keyring ":\t0x" $5 " is revoked"; ok = 0} \ + END { if (!ok) { exit 1 } }' +} + +fail=0 +for keyring in debian-keyring.gpg debian-maintainers.gpg \ + debian-nonupload.gpg; do + find_revoked $keyring +done + +exit $fail |