Git-Mirrors/qusal
1
0
Fork 0
mirror of https://github.com/ben-grande/qusal.git synced 2025-02-02 02:14:55 -05:00
Code Issues Packages Projects Releases Wiki Activity

fix: verify all subkeys expiration date

Browse Source 
For: https://github.com/ben-grande/qusal/issues/46
This commit is contained in:
Ben Grande 2024-05-15 15:58:00 +02:00
parent 2c91bf24ab
commit 40a4107290
No known key found for this signature in database
GPG Key ID: 00C64E14F51F9E56
1 changed files with 22 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
scripts/pgp-expiration.sh
View File

@ -9,21 +9,35 @@ set -eu
now="$(date +%s)"
fail="0"
for key in "${@}"; do
## TODO: exit only after evaluating all subkeys, not on the first error.
gpg --no-keyring --no-auto-check-trustdb --no-autostart \
--with-colons --show-keys "${key}" |
awk -v key="${key}" -v now="${now}" -F ':' '/^(p|s)ub:/ {
data="$(gpg --no-keyring --no-auto-check-trustdb --no-autostart \
--with-colons --show-keys "${key}")"
nr="$(echo "${data}" | awk '/^(p|s)ub:/' | wc -l | cut -d " " -f1)"
echo "${data}" | awk -v fail="0" -v key="${key}" -v nr="${nr}" \
-v now="${now}" -F ':' '/^(p|s)ub:/ {
nlines++;
if ($7=="") {
if (nlines==nr) { if (fail==1) { exit 1; }; }
next
}
if ($7<now) {
print key ": expired:", $5 >"/dev/stderr";
exit 1
print key ": expired:", $5 >"/dev/stderr";
fail=1
if (nlines==nr) { if (fail==1) { exit 1; }; }
next
}
# 60 days
else if (($7-now)<(60*60*24*60)) {
print key ": expires soon:", $5 >"/dev/stderr";
exit 1
print key ": expires soon:", $5 >"/dev/stderr";
fail=1
if (nlines==nr) { if (fail==1) { exit 1; }; }
next
}
if (fail==1) {
exit 1
}
}' || fail="1"
done