Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • W wkd-srv
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 3
    • Issues 3
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 0
    • Merge requests 0
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Container Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • immerdaimmerda
  • Container ImagesContainer Images
  • wkd-srv
  • Merge requests
  • !2

fix #6 - enable upload of keys with plain email as uid

  • Review changes

  • Download
  • Email patches
  • Plain diff
Merged mh requested to merge allow-plain-email-as-uid into master Sep 12, 2022
  • Overview 1
  • Commits 1
  • Pipelines 2
  • Changes 16

Our current filtering mechanism did not allow for plain emails as uids. Which is what can be done and some people do it.

To safely import keys where there is a plain email in the uid, we can make use of the new mbox import filter, that is available since 2.1.14.

With this we can change our filtering (through import & export) approach:

  1. we detect if we have a single key through simple gpg < keymaterial inspection.
  2. if we have a single key, we record the fingerprint
  3. We import using the mbox filter with a direct match of the email address
  4. We export by matching with the fingerprint

This will give us the exact matching key (through fpr) if there is a direct match on the email, which is all delegated to gpg itself.

Assignee
Assign to
Reviewers
Request review from
Time tracking
Source branch: allow-plain-email-as-uid