Browse Source

Update key checks

Bob Mottram 7 years ago
parent
commit
902db81036
1 changed files with 34 additions and 20 deletions
  1. 34
    20
      tests/check-apt-key.sh

+ 34
- 20
tests/check-apt-key.sh View File

@@ -2,12 +2,12 @@
2 2
 #Verify with the key fatch from https://ftp-master.debian.org/keys.html
3 3
 
4 4
 #---------------------------------------------------------------------------
5
-#"Debian Archive Automatic Signing Key (8/jessie) <ftpmaster@debian.org>"
5
+#"Debian Archive Automatic Signing Key (9/stretch) <ftpmaster@debian.org>"
6 6
 
7
-JESSIEARCHIVEKEY=" 126C 0D24 BD8A 2942 CC7D  F8AC 7638 D044 2B90 D010"
8
-CHECKTMP=$(apt-key finger | grep -B 1 "Debian Archive Automatic Signing Key (8/jessie) <ftpmaster@debian.org>" | head -n1 | awk -F '=' '{printf $2}')
7
+STRETCHARCHIVEKEY=" E1CF 20DD FFE4 B89E 8026  58F1 E0B1 1894 F66A EC98"
8
+CHECKTMP=$(apt-key finger | grep -B 1 "Debian Archive Automatic Signing Key (9/stretch) <ftpmaster@debian.org>" | head -n1 | awk -F '=' '{printf $2}')
9 9
 
10
-if [ "$CHECKTMP" == "$JESSIEARCHIVEKEY" ];then
10
+if [ "$CHECKTMP" == "$STRETCHARCHIVEKEY" ];then
11 11
        echo Good
12 12
        :
13 13
 else
@@ -16,12 +16,12 @@ else
16 16
 fi
17 17
 
18 18
 #---------------------------------------------------------------------------
19
-#"Debian Security Archive Automatic Signing Key (8/jessie) <ftpmaster@debian.org>"
19
+#"Debian Security Archive Automatic Signing Key (9/stretch) <ftpmaster@debian.org>"
20 20
 
21
-JESSIESECURITYKEY=" D211 6914 1CEC D440 F2EB  8DDA 9D6D 8F6B C857 C906"
22
-CHECKTMP=$(apt-key finger | grep -B 1 "Debian Security Archive Automatic Signing Key (8/jessie) <ftpmaster@debian.org>" | head -n1 | awk -F '=' '{printf $2}')
21
+STRETCHSECURITYKEY=" 6ED6 F5CB 5FA6 FB2F 460A  E88E EDA0 D238 8AE2 2BA9"
22
+CHECKTMP=$(apt-key finger | grep -B 1 "Debian Security Archive Automatic Signing Key (9/stretch) <ftpmaster@debian.org>" | head -n1 | awk -F '=' '{printf $2}')
23 23
 
24
-if [ "$CHECKTMP" == "$JESSIESECURITYKEY" ];then
24
+if [ "$CHECKTMP" == "$STRETCHSECURITYKEY" ];then
25 25
        echo Good
26 26
        :
27 27
 else
@@ -30,12 +30,26 @@ else
30 30
 fi
31 31
 
32 32
 #---------------------------------------------------------------------------
33
-#"Jessie Stable Release Key <debian-release@lists.debian.org>"
33
+#"Debian Stable Release Key (9/stretch) <debian-release@lists.debian.org>"
34 34
 
35
-JESSIESTABLEKEY=" 75DD C3C4 A499 F1A1 8CB5  F3C8 CBF8 D6FD 518E 17E1"
36
-CHECKTMP=$(apt-key finger | grep -B 1 "Jessie Stable Release Key <debian-release@lists.debian.org>" | head -n1 | awk -F '=' '{printf $2}')
35
+STRETCHSTABLEKEY=" 067E 3C45 6BAE 240A CEE8  8F6F EF0F 382A 1A7B 6500"
36
+CHECKTMP=$(apt-key finger | grep -B 1 "Debian Stable Release Key (9/stretch) <debian-release@lists.debian.org>" | head -n1 | awk -F '=' '{printf $2}')
37 37
 
38
-if [ "$CHECKTMP" == "$JESSIESTABLEKEY" ];then
38
+if [ "$CHECKTMP" == "$STRETCHSTABLEKEY" ];then
39
+       echo Good
40
+       :
41
+else
42
+       echo bad
43
+       exit 1
44
+fi
45
+
46
+#---------------------------------------------------------------------------
47
+#"Debian Archive Automatic Signing Key (8/jessie) <ftpmaster@debian.org>"
48
+
49
+JESSIEARCHIVEKEY=" 126C 0D24 BD8A 2942 CC7D  F8AC 7638 D044 2B90 D010"
50
+CHECKTMP=$(apt-key finger | grep -B 1 "Debian Archive Automatic Signing Key (8/jessie) <ftpmaster@debian.org>" | head -n1 | awk -F '=' '{printf $2}')
51
+
52
+if [ "$CHECKTMP" == "$JESSIEARCHIVEKEY" ];then
39 53
        echo Good
40 54
        :
41 55
 else
@@ -44,12 +58,12 @@ else
44 58
 fi
45 59
 
46 60
 #---------------------------------------------------------------------------
47
-#"Debian Archive Automatic Signing Key (6.0/squeeze) <ftpmaster@debian.org>"
61
+#"Debian Security Archive Automatic Signing Key (8/jessie) <ftpmaster@debian.org>"
48 62
 
49
-SQUEEZEARCHIVEKEY=" 9FED 2BCB DCD2 9CDF 7626  78CB AED4 B06F 4730 41FA"
50
-CHECKTMP=$(apt-key finger | grep -B 1 "Debian Archive Automatic Signing Key (6.0/squeeze) <ftpmaster@debian.org>" | head -n1 | awk -F '=' '{printf $2}')
63
+JESSIESECURITYKEY=" D211 6914 1CEC D440 F2EB  8DDA 9D6D 8F6B C857 C906"
64
+CHECKTMP=$(apt-key finger | grep -B 1 "Debian Security Archive Automatic Signing Key (8/jessie) <ftpmaster@debian.org>" | head -n1 | awk -F '=' '{printf $2}')
51 65
 
52
-if [ "$CHECKTMP" == "$SQUEEZEARCHIVEKEY" ];then
66
+if [ "$CHECKTMP" == "$JESSIESECURITYKEY" ];then
53 67
        echo Good
54 68
        :
55 69
 else
@@ -58,12 +72,12 @@ else
58 72
 fi
59 73
 
60 74
 #---------------------------------------------------------------------------
61
-#"Squeeze Stable Release Key <debian-release@lists.debian.org>"
75
+#"Jessie Stable Release Key <debian-release@lists.debian.org>"
62 76
 
63
-SQUEEZESTABLEKEY=" 0E4E DE2C 7F3E 1FC0 D033  800E 6448 1591 B983 21F9"
64
-CHECKTMP=$(apt-key finger | grep -B 1 "Squeeze Stable Release Key <debian-release@lists.debian.org>" | head -n1 | awk -F '=' '{printf $2}')
77
+JESSIESTABLEKEY=" 75DD C3C4 A499 F1A1 8CB5  F3C8 CBF8 D6FD 518E 17E1"
78
+CHECKTMP=$(apt-key finger | grep -B 1 "Jessie Stable Release Key <debian-release@lists.debian.org>" | head -n1 | awk -F '=' '{printf $2}')
65 79
 
66
-if [ "$CHECKTMP" == "$SQUEEZESTABLEKEY" ];then
80
+if [ "$CHECKTMP" == "$JESSIESTABLEKEY" ];then
67 81
        echo Good
68 82
        :
69 83
 else