[vox-tech] question about trust (gpg)

[Ryan]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thursday 25 July 2002 04:44 pm, Ryan wrote:
> Yeah, the keyservers are great for this. You could set up a script to r=
un
> via a cron job to sync with the keyservers (weekly is my sugguestion...=
=2E)
> and automaticly download the keys to any unknown signatures. (if anyone
> has/knows of such a script, please share)

Fine, I wrote one myself (quick and dirty perl hack) :P

It'll ask your default keyserver for a copy of each of the keys on your=20
public key ring.

I'm placing it into public domain, so do whatever you want with it, but I=
'm=20
not responsible if it breaks, formats your hard drive, etc.....

#!/usr/bin/perl -w

@pubkeys =3D `gpg --list-sigs | grep pub`; # Get a list of public keys on=
 our=20
keyring

foreach ( @pubkeys ) {
  s/\// /;                               # Convert '/'s to ' 's
  s/(\S+)\s+(\S+)\s+(\S+).*/$3/;       # Strip all but the third field (K=
eyID)
  if ( /[0-9A-F]{8}?/ ) {                # Sanity check the key
    @args =3D ("gpg", "--recv-key", $_);
    print "Updating KeyID $args[2]...";  # Status message
    system(@args);                       # Update the key
  }
}

- --=20
PGP/GPG Fingerprint: 3B30 C6BE B1C6 9526 7A90  34E7 11DF 44F3 7217 7BC7
On pgp.mit.edu, import with `gpg --keyserver pgp.mit.edu --recv-key 72177=
BC7`
Also available at http://www.cal.net/~ryan/ryan_at_mother_dot_com.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9QMViEd9E83IXe8cRAuMQAJ9pOjZyMqfsG1eIyWZMbf2vZEq1gACghWJL
AYGLHDZ/mRxmBj3oCLW6Skw=3D
=3DRZjU
-----END PGP SIGNATURE-----