tools/dist/make-keys.sh

#!/bin/sh

# Script to construct a KEYS file by fetching public keys of full
# committers as listed in the COMMITTERS file from people.apache.org.
#
# Based on "a piece of code" posted by danielsh on 22 Mar 2022 in the
# thread "Questions on Release Management Process":
# https://mail-archives.apache.org/mod_mbox/subversion-dev/202203.mbox/%3C20220323035056.GY7687%40tarpaulin.shahaf.local2%3E
#
# Run in the top directory of a checkout of SVN's sources, where the
# COMMITTERS file is located.
#
# This will download a bunch of .asc files and then cat them together
# to form a KEYS file.
#
# Requires curl. (Could be reworked to use wget, too, I suppose.)

COMMITTERS=`pwd`/COMMITTERS
OUTPUT=`pwd`/KEYS
TMP=`mktemp -d`
OLDPWD=`pwd`

while getopts ":c:o:h" ARG; do
    case "$ARG" in
	c) COMMITTERS=$OPTARG ;;
	o) OUTPUT=$OPTARG ;;
	h) echo "USAGE: $0 [-c PATH/TO/COMMITTERS] [-o PATH/TO/OUTPUT/KEYS] [-h]";
	   echo "";
	   echo "-c  Set the path/name to the COMMITTERS file. Default current directory/COMMITTERS.";
	   echo "-o  Set the path/name of the resulting KEYS file. Default current directory/KEYS.";
	   echo "-h  Display this message";
	   return ;;
    esac
done

if [ ! -f $COMMITTERS ]; then
	echo "COMMITTERS file not found at ${COMMITTERS}"
	exit 1
fi

cd $TMP

for availid in $( perl -anE 'say $F[0] if (/^Blanket/../END ACTIVE FULL.*SCRIPTS LOOK FOR IT/ and /@/)' < $COMMITTERS )
do
	key_url=https://people.apache.org/keys/committer/${availid}.asc
	
	echo -n "Fetching ${key_url}..."
	curl -sSfO ${key_url} 2> /dev/null

	if [ $? -eq 0 ]; then
		echo " OK"
	else
		echo " MISSING"
	fi
done

cat *.asc > $OUTPUT
cd $OLDPWD
rm -rf $TMP