summaryrefslogtreecommitdiffstats
path: root/t/no-revoked.t
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-28 09:19:41 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-28 09:19:41 +0000
commita27c8b00ebf173659f22f53ce65679e94e7dfb1b (patch)
tree02c68ec259348b63c6328896aa73265eb7b3d730 /t/no-revoked.t
parentInitial commit. (diff)
downloaddebian-keyring-a27c8b00ebf173659f22f53ce65679e94e7dfb1b.tar.xz
debian-keyring-a27c8b00ebf173659f22f53ce65679e94e7dfb1b.zip
Adding upstream version 2022.12.24.upstream/2022.12.24upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 't/no-revoked.t')
-rwxr-xr-xt/no-revoked.t22
1 files changed, 22 insertions, 0 deletions
diff --git a/t/no-revoked.t b/t/no-revoked.t
new file mode 100755
index 0000000..efd90b0
--- /dev/null
+++ b/t/no-revoked.t
@@ -0,0 +1,22 @@
+#!/bin/sh
+# Looks for revoked keys in our active keyrings
+set -e
+
+find_revoked () {
+ k=$1
+ gpg --no-options --no-auto-check-trustdb --no-default-keyring \
+ --keyring "./output/keyrings/$k" --list-keys --with-colons \
+ | grep -a '^pub' \
+ | awk -F: -v keyring=$1 \
+ 'BEGIN { ok = 1 } \
+ $2 == "r" {print keyring ":\t0x" $5 " is revoked"; ok = 0} \
+ END { if (!ok) { exit 1 } }'
+}
+
+fail=0
+for keyring in debian-keyring.gpg debian-maintainers.gpg \
+ debian-nonupload.gpg; do
+ find_revoked $keyring
+done
+
+exit $fail