Michel Lind authored 2 years ago and Christian Hesse committed 2 years ago

This file no longer exists in the repository, drop the mention.

Signed-off-by: Michel Alexandre Salim <michel@michel-slm.name>

Michel Lind authored 2 years ago and Christian Hesse committed 2 years ago

These are non-executables, they should be installed 644 rather than 755.

Signed-off-by: Michel Alexandre Salim <michel@michel-slm.name>

keyring/packager/muflone/CAA1D2323A05219AA2F01AA4E642299183ED727E/*:
Revoke signature on muflone@archlinux.org for
CAA1D2323A05219AA2F01AA4E642299183ED727E.

CONTRIBUTING.md:
Extend contributing guidelines by a section about which data is released
to the Web Key Directory.

README.md:
As we are dynamically deriving the target systemd system unit dir, we
require pkgconf and systemd during build time.

Makefile:
Extend install target to also install the WKD update script and the
systemd service and timer.
Vendor enable the systemd timer.

.gitlab-ci.yml:
Add pkgconf and systemd to the list of packages, that are installed
before executing the build and install targets. They are required to
retrieve the correct path for systemd's system units.

wkd_sync/archlinux-keyring-wkd-sync.timer:
Add timer which triggers archlinux-keyring-wkd-sync.service to
persistently refresh existing PGP keys of archlinux-keyring weekly with
up to 12h of randomized delay.

wkd_sync/archlinux-keyring-wkd-sync.service:
Add hardened systemd service to run WKD sync using
`archlinux-keyring-wkd-sync`.

wkd_sync/archlinux-keyring-wkd-sync:
Add script to refresh existing keys of archlinux-keyring on user
systems based on the state of the distribution's Web Key Directory
(WKD).
Invalid or revoked keys are ignored.

.editorconfig:
Use spaces instead of tabs in files.
Add section for Makefile using tabs.

Lukas Fleischer authored 2 years ago and Jonas Witschel committed 2 years ago

Signed-off-by: Lukas Fleischer <lfleischer@archlinux.org>

Signed-off-by: Florian Pritz <bluewind@xinu.at>

Instead of simply string matching a line, we now traverse the packet as
a tree and match the path based on a depth first search.

While traversing, we support logical OR and current depth * wildcard
processed as a component based query expression.

Callee's are adjusted to specifically select the appropriate Issuer at
the correct depth.

Fixes #185

Signed-off-by: Florian Pritz <bluewind@xinu.at>