apt/cmdline/apt-key.in, branch 2.9.0

Implement gpgv --assert-pubkey-algo=>=rsa2048,ed25519,ed448

2024-02-28T17:22:01Z

The assertion can be overriden using apt::key::assert-pubkey-algo, the default is the most opinionated one. This will inform the user during apt-cdrom add as we do not pass --quiet to user, so adjust test case. Add a simple test case for it to test-method-gpgv. LP: #2055193

apt-key: remove carriage returns from armored keyrings before dearmoring

2023-11-29T20:07:59Z

Without this, the awk script returns nothing if the armored keyring uses Windows/DOS-style CRLF line endings (since awk is designed for processing Unix text files). This would result in a NO_PUBKEY error during the signature verification part of an apt-get update.

Warn if the legacy trusted.gpg keyring is used for verification

2022-02-22T17:25:06Z

With apt-key going away, people need to manage key files, rather than keys, so they need to know if any keys are in the legacy keyring.

Use short options for cmp

2021-11-26T14:33:06Z

In order to be consistent with other uses of cmp and to improve compatiblity with other implementations, like busybox one, change long options to short ones. Signed-off-by: Walter Lozano

Use `command -v` instead of `which`

2021-11-03T22:02:41Z

`which` has been deprecated in debianutils 5.0+. The recommended replacement, `command -v`, is mandated by Debian policy these days, in addition to being required by POSIX and its predecessor specs at least since 1994. Not found commands cause no output from `command -v` per POSIX, so remove the redundant 2>&1's while at it.

apt-key: Allow depending on gpg instead of gnupg

2020-05-06T10:52:57Z

Maintainer scripts that need to use apt-key del might as well depend on gpg, they don't need the full gnupg suite.

Fully deprecate apt-key, schedule removal for Q2/2022

2020-05-06T10:33:39Z

People are still using apt-key add and friends, despite that not being guaranteed to work. Let's tell them to stop doing so. We might still want a list command at a future point, but this needs deciding, and a blanket ban atm seems like a sensible step until we figured that out.

Support multiple keyrings in sources.list Signed-By

2018-09-11T11:16:11Z

A user can specify multiple fingerprints for a while now, so its seems counter-intuitive to support only one keyring, especially if this isn't really checked or enforced and while unlikely mixtures of both should work properly, too, instead of a kinda random behaviour.

apt-key: Pass all instead of gpg-agent to gpgconf --kill

2018-05-29T15:57:35Z

We want to kill everything using our temporary directory. LP: #1773992

Fix various typos reported by spellcheckers

2018-05-04T22:34:27Z

Reported-By: codespell & spellintian Gbp-Dch: Ignore