apt/cmdline/apt-key.in, branch 2.9.15

apt-key: Temporarily accept 'pub' as an extension for binary gpg keys

2024-11-28T09:17:21Z

apt-key: Only cat supported keyrings into the merged one

2024-11-28T09:17:21Z

apt-key: Prefer gpgv-sq if it exists

2024-11-22T16:13:14Z

This allows you to test out gpgv-sq by just installing it, which is nice.

Check gpgv --dump-options for --assert-pubkey-algo support

2024-06-13T10:47:49Z

This avoids the fragile --help check. This option is not documented in the manual page but seems to be there. Thanks: Justus Winter for the idea

Implement gpgv --assert-pubkey-algo=>=rsa2048,ed25519,ed448

2024-02-28T17:22:01Z

The assertion can be overriden using apt::key::assert-pubkey-algo, the default is the most opinionated one. This will inform the user during apt-cdrom add as we do not pass --quiet to user, so adjust test case. Add a simple test case for it to test-method-gpgv. LP: #2055193

apt-key: remove carriage returns from armored keyrings before dearmoring

2023-11-29T20:07:59Z

Without this, the awk script returns nothing if the armored keyring uses Windows/DOS-style CRLF line endings (since awk is designed for processing Unix text files). This would result in a NO_PUBKEY error during the signature verification part of an apt-get update.

Warn if the legacy trusted.gpg keyring is used for verification

2022-02-22T17:25:06Z

With apt-key going away, people need to manage key files, rather than keys, so they need to know if any keys are in the legacy keyring.

Use short options for cmp

2021-11-26T14:33:06Z

In order to be consistent with other uses of cmp and to improve compatiblity with other implementations, like busybox one, change long options to short ones. Signed-off-by: Walter Lozano

Use `command -v` instead of `which`

2021-11-03T22:02:41Z

`which` has been deprecated in debianutils 5.0+. The recommended replacement, `command -v`, is mandated by Debian policy these days, in addition to being required by POSIX and its predecessor specs at least since 1994. Not found commands cause no output from `command -v` per POSIX, so remove the redundant 2>&1's while at it.

apt-key: Allow depending on gpg instead of gnupg

2020-05-06T10:52:57Z

Maintainer scripts that need to use apt-key del might as well depend on gpg, they don't need the full gnupg suite.