Justus Winter authored Jul 06, 2021 and Vincent Breitmoser committed Jul 15, 2021

If non-exportable signatures are uploaded to Hagrid, this is most
certainly an accident.  Handle this gracefully by stripping these
signatures (and certificate components that are only bound by
non-exportable signatures) when writing them to the database.

Fixes #155.

Mention use of ngx_http_lua_module for nginx config, and document move
of the IRC channel to OFTC.

Justus Winter authored Jan 12, 2021 and Vincent Breitmoser committed Jun 13, 2021

This implements support for third-party userid certifications.  To
prevent denial-of-service attacks, we only merge those certifications
that are attested by the key holder.

The key holder attests the certifications using an Attested Key
Signature containing the digests of the certifications in an Attested
Certifications subpacket as specified in RFC4880bis-10.

Fixes #124.

Justus Winter authored Jan 13, 2021 and Vincent Breitmoser committed May 06, 2021

Use the convenience function to armor certificates.  This also adds
comments to the armor blocks, making it easier to identify
certificates when casually inspecting them as text files.

Justus Winter authored Jan 13, 2021 and Vincent Breitmoser committed May 06, 2021

This function is now provided by Sequoia, and as we no longer have to
reparse the certificate, it is infallible.  Simplify
tpk_filter_alive_emails accordingly.

The format of keys returned on WKD routes is binary, however
`application/pgp-keys` is specified to contain keys in ASCII-armored
format. The WKD spec says the returned content-type SHOULD be
`application/octet-stream`, too.

references:
https://www.ietf.org/archive/id/draft-koch-openpgp-webkey-service-11.txt
https://tools.ietf.org/html/rfc3156#section-7

This reverts commit 149a698a.
This reverts commit 29018f02.
This reverts commit 42372f27.
This reverts commit a4246422.