blob: efd90b06a1f2ecd6d4e5ce47687f8cffa1237946 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
|
#!/bin/sh
# Looks for revoked keys in our active keyrings
set -e
find_revoked () {
k=$1
gpg --no-options --no-auto-check-trustdb --no-default-keyring \
--keyring "./output/keyrings/$k" --list-keys --with-colons \
| grep -a '^pub' \
| awk -F: -v keyring=$1 \
'BEGIN { ok = 1 } \
$2 == "r" {print keyring ":\t0x" $5 " is revoked"; ok = 0} \
END { if (!ok) { exit 1 } }'
}
fail=0
for keyring in debian-keyring.gpg debian-maintainers.gpg \
debian-nonupload.gpg; do
find_revoked $keyring
done
exit $fail
|
