https://github.com/cryolitia/pgp-sig2dot

OpenPGP sign party tool —— Visualize the Web of Trust
https://github.com/cryolitia/pgp-sig2dot

Last synced: 3 months ago
JSON representation

OpenPGP sign party tool —— Visualize the Web of Trust

• Host: GitHub
• URL: https://github.com/cryolitia/pgp-sig2dot
• Owner: Cryolitia
• License: mit
• Created: 2024-08-11T16:07:54.000Z (6 months ago)
• Default Branch: main
• Last Pushed: 2024-09-08T12:49:05.000Z (5 months ago)
• Last Synced: 2024-10-08T17:40:05.121Z (4 months ago)
• Language: Rust
• Homepage:
• Size: 621 KB
• Stars: 2
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# pgp-sig2dot

OpenPGP sign party tool —— Visualize the Web of Trust

This tool contains two part:

1. The Rust part parse OpenPGP data, fetching keys from keyserver, and output the DOT of the web of trust.

2. The second part parse DOT input, and call [jaal](https://github.com/imohitmayank/jaal)

   or [networkx](https://github.com/networkx/networkx) or [graphviz](https://graphviz.org/) as a visualization backend.

## Gallery

![demo](https://github.com/Cryolitia/pgp-sig2dot/blob/main/demo.png?raw=true)

![https://openpgpkey.project-trans.org/](https://openpgpkey.project-trans.org/wot.svg)

## Usage Example

### Cargo

The Rust part can be used independently and output in DOT format, and can be further used with tools such as graphviz.

This part has been published to creates.io: https://crates.io/crates/pgp-sig2dot

Run `pgp-sig2dot --help` to find out how to use it.

### Nix

This set of tools is further packaged into Nix, making it easy to use out of the box.

- Show the web of trust in `gpg` keyring, show only primary uid, use `networkx` as backend.

    ```sh

    gpg --export | nix run github:Cryolitia/pgp-sig2dot#pgp-sig2dot-networkx -- -vv --import - -p

    ```

- Show the web of trust in AOSCC 2024 keyring(not provide in this repo), show only primary uid, fetching new signatures

  on keyserver, use `networkx` as backend.

    ```sh

    cat aoscc2024.gpg | nix run github:Cryolitia/pgp-sig2dot#pgp-sig2dot-networkx -- -vv --import - -p --online

    ```

- Show the web of trust from specified keys, automatically fetching from keyserver, use jaal as backend

    ```sh

    nix run github:Cryolitia/pgp-sig2dot#pgp-sig2dot-jaal -- -vv -k 1C3C6547538D7152310C0EEA84DD0C0130A54DF7 892EBC7DC392DFF9C9C03F1D15F4180E73787863 CEDBA39E576BC6C21B71A64825E82BBEA32BD476

    ```

- Show the web of trust with `graphiz` backend

    ```sh

    gpg --export | nix run github:Cryolitia/pgp-sig2dot#pgp-sig2dot-graphviz -- -vv --import - > temp.svg

    ```

- Show help of the rust part

    ```sh

    nix run github:Cryolitia/pgp-sig2dot#pgp-sig2dot-rust-part -- --help

    ```