Home GnuPG
Diffusion GnuPG 99ef78aa0ca7

gpg: Remove stale ultimately trusted keys from the trustdb.

Description

gpg: Remove stale ultimately trusted keys from the trustdb.

* g10/tdbdump.c (export_ownertrust): Skip records marked with the
option --trusted-key.
(import_ownertrust): Clear the trusted-key flag.
* g10/tdbio.h (struct trust_record): Add field flags.
* g10/tdbio.c (tdbio_dump_record): Improve output.
(tdbio_read_record, tdbio_write_record): Handle flags.
* g10/trustdb.c (verify_own_keys): Clear stale trusted-keys and set
the flag for new --trusted-keys.
(tdb_update_ownertrust): Add arg as_trusted_key.  Update callers.
  • GnuPG-bug-id: T5685
  • Signed-off-by: Werner Koch <wk@gnupg.org>

Details

Provenance
wernerAuthored on Nov 13 2021, 8:34 PM
Parents
rGb0079ab39d31: keyboxd: New option --steal-socket.
Branches
Unknown
Tags
Unknown
Tasks
T5685: Clear stale --trusted-key records from the trustdb