Git-Mirrors/qusal
1
0
Fork 0
mirror of https://github.com/ben-grande/qusal.git synced 2025-02-02 10:24:56 -05:00
Code Issues Packages Projects Releases Wiki Activity

fix: verify all subkeys expiration date

Browse Source 
For: https://github.com/ben-grande/qusal/issues/46
This commit is contained in:
Ben Grande 2024-05-15 15:58:00 +02:00
parent 2c91bf24ab
commit 40a4107290
No known key found for this signature in database
GPG Key ID: 00C64E14F51F9E56
1 changed files with 22 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
scripts/pgp-expiration.sh
View File

@ -9,21 +9,35 @@ set -eu
now="$(date +%s)" now="$(date +%s)"
fail="0" fail="0"
for key in "${@}"; do for key in "${@}"; do
## TODO: exit only after evaluating all subkeys, not on the first error. data="$(gpg --no-keyring --no-auto-check-trustdb --no-autostart \
gpg --no-keyring --no-auto-check-trustdb --no-autostart \ --with-colons --show-keys "${key}")"
--with-colons --show-keys "${key}" | nr="$(echo "${data}" | awk '/^(p|s)ub:/' | wc -l | cut -d " " -f1)"
awk -v key="${key}" -v now="${now}" -F ':' '/^(p|s)ub:/ { echo "${data}" | awk -v fail="0" -v key="${key}" -v nr="${nr}" \
-v now="${now}" -F ':' '/^(p|s)ub:/ {
nlines++;
if ($7=="") { if ($7=="") {
if (nlines==nr) { if (fail==1) { exit 1; }; }
next next
} }
if ($7<now) { if ($7<now) {
print key ": expired:", $5 >"/dev/stderr"; print key ": expired:", $5 >"/dev/stderr";
exit 1 fail=1
if (nlines==nr) { if (fail==1) { exit 1; }; }
next
} }
# 60 days # 60 days
else if (($7-now)<(60*60*24*60)) { else if (($7-now)<(60*60*24*60)) {
print key ": expires soon:", $5 >"/dev/stderr"; print key ": expires soon:", $5 >"/dev/stderr";
exit 1 fail=1
if (nlines==nr) { if (fail==1) { exit 1; }; }
next
}
if (fail==1) {
exit 1
} }
}' || fail="1" }' || fail="1"
done done