not easy to assemble a GPG keyring for a team

[Kees Cook]

It would be very handy to be able to download a bundle of gpg keys for a given team. For example, if I wanted to quickly import the public keys for all the people in the ubuntu-dev team, so I could do MOTU package signature verifications.

Right now, when browsing to an individual, you are shown a link to their key. e.g. for me:
 OpenPGP keys: 17063E6D

If this appeared on the team page as well, but in some other form, perhaps, then the keyring could be easily downloaded.

workarounds
===========

Use the API to script grabbing all the keys separately.

[Björn Tillenius (bjornt)]

On Fri, Oct 06, 2006 at 03:47:46PM -0000, Kees Cook wrote:
> Public bug reported:
>
> It would be very handy to be able to download a bundle of gpg keys for a
> given team. For example, if I wanted to quickly import the public keys
> for all the people in the ubuntu-dev team, so I could do MOTU package
> signature verifications.

We have an RDF view of a team, which includes the gpg keys, maybe that
simplifies things for you?

For example:

    https://launchpad.net/people/ubuntu-dev/+rdf

[Kees Cook (kees)]

On Fri, Oct 06, 2006 at 04:19:18PM -0000, Björn Tillenius wrote:
> We have an RDF view of a team, which includes the gpg keys, maybe that
> simplifies things for you?
>
> For example:
>
> https://launchpad.net/people/ubuntu-dev/+rdf

Ah-ha, yes, that makes a good work-around. I'll use that for now:

 curl https://launchpad.net/people/ubuntu-security/+rdf | \
  grep fingerprint | perl -pe 's/<[^>]*>//g; s/\s+//;' | \
  xargs gpg --keyserver keyserver.ubuntu.com --recv-keys

In a perfect world, clicking "Keyring" or something would dump the
ASCII-armored keyring for everyone in the team.

Thanks for the URL, I hadn't even thought to check for meta info. :)

--
Kees Cook @outflux.net