search

msys2 / MSYS2-keyring

Master and packager keys for MSYS2 official Pacman repositories
24 stars 10 forks source link

Revoke/Remove Ray's keys #9

Closed lazka closed 2 years ago

Biswa96 commented 3 years ago

Is there any way to know if a package was signed by him?

jeremyd2019 commented 3 years ago
  1. signer info is on packages.msys2.org, but that would only tell you about current packages I think
  2. a script could be made pretty straightforwardly I think to look at all .sig files for his key id (hint: see https://github.com/msys2/msys2-web/blob/master/app/pgp.py#L36)
lazka commented 3 years ago

good point, would be good to know first

lazka commented 3 years ago

signatures of all *.sig files

so all good

elieux commented 3 years ago

Let's do it?

elieux commented 3 years ago

We have to deal with the master key as well.