X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;f=src%2Fshare%2Fmh%2Frevoke_hostname;h=6b80802408ef0b2eb0a55f9cb422667d1bab813e;hb=cf7d2f1e843e429a462d2dd11430fd48b0281cb2;hp=b3b8d7a330481e70acfa17d7bc88f0670221d51d;hpb=80f608dfb8cd0a59609f3c98834e44f0c78fffb0;p=monkeysphere.git diff --git a/src/share/mh/revoke_hostname b/src/share/mh/revoke_hostname index b3b8d7a..6b80802 100644 --- a/src/share/mh/revoke_hostname +++ b/src/share/mh/revoke_hostname @@ -43,7 +43,14 @@ else fi # actually revoke: -if <"$GNUPGHOME_HOST/secring.gpg" "$SYSSHAREDIR/keytrans" revokeuserid \ + +# the gpg secring might not contain the host key we are trying to +# revoke (let alone any selfsig over that host key), but the plain +# --export won't contain the secret key. "keytrans revokeuserid" +# needs access to both pieces, so we feed it both of them. + +if (cat "$GNUPGHOME_HOST/secring.gpg" && gpg_host --export "$HOST_FINGERPRINT") | \ + "$SYSSHAREDIR/keytrans" revokeuserid \ "$HOST_FINGERPRINT" "$userID" | gpg_host --import ; then gpg_host --check-trustdb