← Back to issue list

snap does not support revocation of signing keys

View original Launchpad issue

Metadata

Project
snapcraft (launchpad)
Number
#1744013
Type
issue
State
open
Author
~vilvo
Labels
Created
2018-01-18 09:43:25.643214+00:00
Updated
2018-01-18 09:43:47.458897+00:00
Closed

Current evaluation

No evaluation has been recorded for this issue yet.

Issue body

snapcraft signing model assertion process does not support revocation of the signing keys. How to reproduce: 1) Login snapcraft > snapcraft login 2) Create default key (need to be done only once) > snapcraft create-key 3) Generate timestamp > date -Iseconds --utc 4) Copy the result of date into the timestamp field of the model file e.g. board-model.json 5) Log into your account and copy "Snap account-id" into both the "authority-id" and the "brand-id" fields in the file board-model.json: https://dashboard.snapcraft.io/dev/account/ 6) Create a new model assertion by running: > cat board-model.json | snap sign -k default &> board.model 7) There is no way to revoke the created key.

Evaluation history

No evaluation history available.