Re: keyserver.insect.com GDRP takedown request

[Ced]

On Fri, 27 May 2022 06:48:21 +0200
Alexandre Dulaunoy <adulau@foo.be> wrote:

> Hi All,
> 
> Hockeypuck supports blacklists (from version 2.1.0) when you can list
> all the fingerprint keys you want to avoid being synced.
> 
> In addition, you can delete the keys from Hockeypuck (PostgreSQL
> database).
> 
> A key can be deleted from the SQL database in the following way:
> 
> - Query the pks interface for the offending key, get the hash
> fingerprint from Hockeypuck;
> 
> - Connect to Postgresql via psql
> 
> -select rfingerprint from keys where md5 in (<HASHFINGERPRINT>);
> 
> - The returned rfingerprint can be used to delete  to delete the
> subkeys
> 
> delete from subkeys where rfingerprint in (<RFINGERPRINT>);
> 
> - When all subkeys are deleted.
> 
> - delete from keys where md5 in (<HASHFINGERPRINT>)
> 
> Don't forget to add the key in blacklist:
> 
> [hockeypuck.openpgp]
> blacklist=[
>   "KEYFINGERPRINT"]
> 
> I hope this helps.
> 
> 
> Blacklists -> https://github.com/hockeypuck/hockeypuck/releases

Hi Alexandre,

You made my day! I somehow missed this new blacklist feature introduced
in 2.1.0. This is exactly what I was looking/hoping for.

Here are the keys I've been asked to delete in case anyone needs an easy
copy-and-paste:

> diff --git i/hockeypuck.conf w/hockeypuck.conf
> --- i/hockeypuck.conf
> +++ w/hockeypuck.conf
> 
> +[hockeypuck.openpgp]
> +blacklist=[
> +  "4ee0ea407647ce7f893b4d4cd55a56ed08155aa7",
> +  "e706e6e2b0062d68e00ad3a71b4e586917d2d55f",
> +  "90034cca442a325fedeb2e0302f6eb3d3523062f",
> +  "39762a49f4f92358ba98d0897e4cd9873ead04e5",
> +  "22dd2374f7c072b064731b84042ef61f3f2951c3",
> +  "9c002fd129aab3daaf4886c11bacfff4421c6f24",
> +  "c50c58c6a45c7f10332119c31ec6e78556894cf2",
> +  "33c251792b7ad4efa60f3b6f854b81325727766a",
> +  "c7a23d987c0a2f4a8c2c406595d3c5c466c16f5c",
> +  "cd30dadcde54b62476ed5dbdaac27ada79fa32f4",
> +  "10659e93de8ed69f47a8e6a4752e6011a7cec081",
> +  "fe1753d8f4cbfc8913c71a73461bb523e2468f79",
> +  "27b5000e1b27a03dd45e63fdd1c937f64b790fe5",
> +  "4a3c31edb549e934faa31cf18a4ed56c1b7d70f8",
> +  "11d33e66c37371dce4429a9d8be6e0081569fec9",
> +  "2e2ebc681e19ff06574b7f22ae5453a45153bd1f",
> +]

That is 16 keys however only 12 keys were present in Postgresql in my
case:

> hkp=> select rfingerprint from keys where md5 in
> ('db72376c0d739cfe9c0dfad593b146fe',
> '8c48c609644ff786d76ec0f42d3c653b',
> 'fc27c75c60fc832873d8be8b4cd33443',
> 'd4ef3e8ac56e54b6d5eb00dca43e756d',
> '2b8337e73c153e2395d982778638b223',
> 'd89a48fe2d8989824cb643aa2c4efb5a',
> '0531a90ff608dce3a08bdc534df82af8',
> '657d6a3b3eb0b37cc4b76336e698f21e',
> '68cb4a91f5e3d65ae6cd97d70951f41e',
> '4b7f8a95463b513b1b39b9fff7073e8d',
> '8f0207a20e6c3a8f8bcb8a85dbd5bccf',
> 'a875563073af91fce3e44ad3a3c9141a');
> rfingerprint
> ------------------------------------------
> 9cef9651800e6eb8d9a9244ecd17373c66e33d11
> 7aa55180de65a55dc4d4b398f7ec746704ae0ee4
> f55d2d719685e4b17a3da00e86d2600b2e6e607e
> a66772752318b458f6b3f06afe4da7b297152c33
> c5f61c664c5c3d595604c2c8a4f2a0c789d32a7c
> 42f6c1244fffcab11c6884faad3baa921df200c9
> f2603253d3be6f2030e2bedef523a244acc43009
> f1db35154a3545ea22f7b47560ff91e186cbe2e2
> 5ef097b46f739c1ddf36e54dd30a72b1e0005b72
> 8f07d7b1c65de4a81fc13aaf439e945bde13c3a4
> 2fc49865587e6ce13c91123301f7c54a6c85c05c
> 5e40dae3789dc4e7980d89ab85329f4f94a26793
> (12 rows)
> 
> hkp=> delete from subkeys where rfingerprint in (select rfingerprint
> from keys where md5 in ('db72376c0d739cfe9c0dfad593b146fe',
> '8c48c609644ff786d76ec0f42d3c653b',
> 'fc27c75c60fc832873d8be8b4cd33443',
> 'd4ef3e8ac56e54b6d5eb00dca43e756d',
> '2b8337e73c153e2395d982778638b223',
> 'd89a48fe2d8989824cb643aa2c4efb5a',
> '0531a90ff608dce3a08bdc534df82af8',
> '657d6a3b3eb0b37cc4b76336e698f21e',
> '68cb4a91f5e3d65ae6cd97d70951f41e',
> '4b7f8a95463b513b1b39b9fff7073e8d',
> '8f0207a20e6c3a8f8bcb8a85dbd5bccf',
> 'a875563073af91fce3e44ad3a3c9141a'));
> DELETE 12

> hkp=> delete from
> keys where md5 in ('db72376c0d739cfe9c0dfad593b146fe',
> '8c48c609644ff786d76ec0f42d3c653b',
> 'fc27c75c60fc832873d8be8b4cd33443',
> 'd4ef3e8ac56e54b6d5eb00dca43e756d',
> '2b8337e73c153e2395d982778638b223',
> 'd89a48fe2d8989824cb643aa2c4efb5a',
> '0531a90ff608dce3a08bdc534df82af8',
> '657d6a3b3eb0b37cc4b76336e698f21e',
> '68cb4a91f5e3d65ae6cd97d70951f41e',
> '4b7f8a95463b513b1b39b9fff7073e8d',
> '8f0207a20e6c3a8f8bcb8a85dbd5bccf',
> 'a875563073af91fce3e44ad3a3c9141a');
> DELETE 12

Thank you again Alexandre!

Cheers,
Ced

pgpLY_orGji9B.pgp
Description: OpenPGP digital signature