Stefano Zacchiroli dijo [Fri, Aug 07, 2026 at 09:34:06AM +0200]:
Thanks for raising this Gunnar, I've been bitten by it in the past :-)Is there a way for people to check the current expiration date of their key copy *in the keyring used by devotee*? That would be very helpful. (In my case, I was bitten by the fact the keyring copy was not up-to-date wrt where I was checking myself, so having a way to check *on devotee* side would have been a real plus.)
I think the following does the trick:
$ KEYID=0x2404C9546E145360 # Naturally, replace for your own
$ TMPDIR=$(mktemp -d)
$ sq network keyserver search $KEYID --server hkps://keyring.debian.org
--cert-store $TMPDIR --quiet
$ sq cert list $KEYID --cert-store $TMPDIR
$ rm -rf $TMPDIR
Expired keys will output a “Warning: ($keyid) is unusable: No binding
signature at time ($curr_time), because Policy rejected non-revocation
signature” to STDERR.
Of course, you could beautify this, but just for checking you key's status
in the keyring, it should do the trick 🙃
signature.asc
Description: PGP signature
