progmaticltd / homebox

A set of ansible scripts to build a personal mail server / private cloud / etc.
https://homebox.space/
GNU General Public License v3.0
461 stars 52 forks source link

Add an OpenPGP Web Key Directory role #356

Closed fredericmoulins closed 3 years ago

fredericmoulins commented 3 years ago

This PR requires #355 first, and addresses #336.

Use both the direct and advanced publishing methods.

https://tools.ietf.org/html/draft-koch-openpgp-webkey-service

The public keys are expected to be in the server configuration in a "pgp" object list along with the user's uid.

pgp:
  - uid: marie
    ascii_armored_public_key: |
      -----BEGIN PGP PUBLIC KEY BLOCK-----

      […]
      -----END PGP PUBLIC KEY BLOCK-----

The server's gpg is used to determine the WKD hash for each key, which is then used to name the published files.