Revoking a Model Signing Key

[jocado]

Hi,

I have raised a support ticket about this, but thought I would reach out here to see if I can get any good suggestions in the meantime.

I created and registered a Model Signing Key to a store Brand Account that I wish to revoke or disable somehow. After a bit of googling, it doesn’t seem like it’s currently possible via standard user tools and API.

Here are some related posts on this forum:

Questions on snapcraft / snap key infrastructure

I’m in the process of signing model assertions for an image and studied if signing can be automated. Automated can mean also having keys on a CI server, having separate keys for internal development assertions and published assertions, revoking keys and using keys without passphrase (non-interactive signing). Non-interactive signing I found to work by testing - just snapcraft create-key passwordlesskey and hit enter two times. After that you can sign your model assertions in non-interactive s…

How to unregister a store signature key

Hi, I am trying to make my own core image as in https://tutorials.ubuntu.com/tutorial/create-your-own-core-image#3. How do i un-register an already existing key? Thanks for the help regards Arun

Has any progress been made ? Can I just register a revoked version of the key [ after doing a gpg revoke operation in gpg --homedir .snap/gnupg/ ] ?

Cheers,
Just