Commit | Line | Data |
---|---|---|
227fa583 | 1 | #!/bin/bash -l |
3e4c32c3 IK |
2 | |
3 | set -e | |
4 | set -x | |
5 | ||
227fa583 IK |
6 | refresh-gpg-key() { |
7 | ||
8 | key=$1 | |
9 | ||
10 | error=999 | |
11 | for keyserver in pgp.mit.edu pool.sks-keyservers.net keyring.debian.org; do | |
12 | set +e | |
13 | cmd="gpg --keyserver $keyserver --recv-keys $key" | |
14 | # keyservers are not very reliable, so retry | |
15 | for x in {1..3}; do | |
16 | $cmd &>/dev/null | |
17 | ret=$? | |
18 | if (( ret == 0 )); then break; fi | |
19 | sleep 1 | |
20 | done | |
21 | set -e | |
22 | error=$(( ret < error ? ret : error )) # use lowest return | |
23 | done | |
24 | ||
25 | return $error | |
26 | } | |
3e4c32c3 | 27 | |
e72d434b IK |
28 | refresh=true |
29 | if [[ $1 == -r ]]; then | |
30 | refresh=false | |
31 | fi | |
32 | ||
3e4c32c3 IK |
33 | KEYS+="67819B343B2AB70DED9320872C6464AF2A8E4C02 " #rms |
34 | KEYS+="A4626CBAFF376039D2D7554497BA9CE761A0963B " #johns | |
35 | KEYS+="759C0A4A39A02A079712FB5061B826E87A80C8D6 " #johnh | |
36 | KEYS+="CEA951DB865D0D257BB0A14DCEB69E6F9B36C195 " #andrew | |
37 | KEYS+="13A0851D6307FC54FCCB81BA2C1008316F3E89B7 " #donald | |
3e4c32c3 IK |
38 | KEYS+="EF6643D6E1F115D1A9B7D59C92D16583E1E7C532 " #jeanne |
39 | KEYS+="04C45B4E3AF05E9EB140FD148B10E9C6407BD6E1 " #matt | |
40 | KEYS+="05EF1D2FFE61747D1FC827C37FAC7D26472F4409 " #ruben | |
41 | KEYS+="0CCB3494C13CCD8F6EC73AA06DA6B7D151C7643E " #dana | |
42 | KEYS+="B125F60B7B287FF6A2B7DF8F170AF0E2954295DF " #ian | |
43 | KEYS+="ECE5B5BF952A3AEA92C137F9C9230A4849ACE0DB " #molly | |
f4caeebe | 44 | KEYS+="36C9950D2F68254ED89C7C03F9C13A10581AB853 " #craigt |
3e4c32c3 IK |
45 | KEYS+="E9A271C071964891AA57663D9EA33414F5852F4E " #mako |
46 | KEYS+="A2F4F1966D9E35C673EC30D5B6F1D83E9ACD9EBB " #bkuhn | |
47 | KEYS+="2C31130BF7D5A459AFF2A3F3C9DFFE4A33AA52D9 " #knauth | |
06ea525c | 48 | KEYS+="43372794C8ADD5CA8FCFFA6CD03759DAB600E3C0 " #michael |
47309b71 | 49 | KEYS+="B102017CCF698F79423EF9CC069C04D206A59505 " #zoe |
3e4c32c3 IK |
50 | |
51 | rm -f /tmp/keys.asc ./fsf-keyring.gpg | |
52 | ||
53 | for KEY in $KEYS ; do | |
e72d434b IK |
54 | if $refresh; then |
55 | refresh-gpg-key $KEY | |
56 | fi | |
227fa583 | 57 | gpg --export --armor $KEY >> /tmp/keys.asc |
3e4c32c3 IK |
58 | done |
59 | ||
f4caeebe IK |
60 | # note: this doesn't work with gpg2. i dunno what the equivalent is in |
61 | # gpg2, likely just exporting all the keys. | |
62 | command gpg --trust-model always --no-default-keyring --keyring ./fsf-keyring.gpg --import /tmp/keys.asc | |
227fa583 IK |
63 | gpg --sign ./fsf-keyring.gpg |
64 | mv fsf-keyring.gpg.gpg fsf-keyring.gpg | |
47309b71 | 65 | rm fsf-keyring.gpg~ |