snap does not support revocation of signing keys
Metadata
Current evaluation
No evaluation has been recorded for this issue yet.
Issue body
snapcraft signing model assertion process does not support revocation of the signing keys.
How to reproduce:
1) Login snapcraft
> snapcraft login
2) Create default key (need to be done only once)
> snapcraft create-key
3) Generate timestamp
> date -Iseconds --utc
4) Copy the result of date into the timestamp field of the model file e.g. board-model.json
5) Log into your account and copy "Snap account-id" into both the "authority-id"
and the "brand-id" fields in the file board-model.json:
https://dashboard.snapcraft.io/dev/account/
6) Create a new model assertion by running:
> cat board-model.json | snap sign -k default &> board.model
7) There is no way to revoke the created key.
Evaluation history
No evaluation history available.