Package: signing-party
Version: 2.11-1
Severity: normal
File: /usr/bin/gpgparticipants-filter
Tags: patch
X-Debbugs-Cc: uklei...@debian.org

Hello,

gpgparticipants-filter doesn't skip revoked and expired keys, so the
--all-keys option is a noop.

The following change fixes that:

diff --git a/gpgparticipants/gpgparticipants-filter 
b/gpgparticipants/gpgparticipants-filter
index 7e33dc3286be..38bdcdc4d2c7 100755
--- a/gpgparticipants/gpgparticipants-filter
+++ b/gpgparticipants/gpgparticipants-filter
@@ -118,7 +118,7 @@ def key_data_from(raw_data_set):
     return KeyDataSet(
         raw_data_set.data_field_from_lines(9, b'fpr')[0],
         raw_data_set.data_field_from_lines(9, b'uid'),
-        raw_data_set.data_field_from_lines(9, b'pub')[0],
+        raw_data_set.data_field_from_lines(1, b'pub')[0],
     )
 
 
According to the gpg documentation field 10 (which is indexed using 1
for the first field and so matches Python array index 9) is the User-ID
which is usually (always?) empty in "pub" lines. The validity is in
field 2.

This bug exists since 2.11-1 when gpgparticipants-filter was introduced
in commit 731d436f839a.

Best regards
Uwe

-- System Information:
Debian Release: trixie/sid
  APT prefers testing-debug
  APT policy: (750, 'testing-debug'), (750, 'testing'), (700, 
'stable-updates'), (700, 'stable-security'), (700, 'stable-debug'), (700, 
'stable'), (600, 'unstable'), (500, 'unstable-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: armhf

Kernel: Linux 6.12.21-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages signing-party depends on:
ii  gnupg                      2.4.7-14
ii  libc6                      2.41-6
ii  libclass-methodmaker-perl  2.25-1
ii  libgnupg-interface-perl    1.04-6
ii  libmailtools-perl          2.22-1
ii  libmd0                     1.1.0-2+b1
ii  libmime-tools-perl         5.515-1
ii  libnet-idn-encode-perl     2.500-5+b1
ii  libterm-readkey-perl       2.38-2+b4
ii  libtext-template-perl      1.61-1
ii  perl                       5.40.1-3
ii  python3                    3.13.2-2
ii  qprint                     1.1.dfsg.2-2.3

Versions of packages signing-party recommends:
ii  exim4-daemon-light [mail-transport-agent]  4.98.2-1
ii  libgd-perl [libgd-gd2-perl]                2.78-1+b3
ii  libpaper-utils                             2.2.5-0.3+b2
ii  whiptail                                   0.52.25-1

Versions of packages signing-party suggests:
pn  fonts-noto-cjk                   <none>
ii  fonts-noto-mono                  20201225-2
ii  imagemagick                      8:7.1.1.43+dfsg1-1
ii  imagemagick-7.q16 [imagemagick]  8:7.1.1.43+dfsg1-1
ii  neomutt                          20250113+dfsg-1
ii  qrencode                         4.1.1-2
pn  texlive-font-utils               <none>
ii  texlive-latex-extra              2024.20250309-2
ii  texlive-latex-recommended        2024.20250309-1
pn  texlive-xetex                    <none>
pn  wipe                             <none>

-- no debconf information

Reply via email to