withdrawnSigningKeys property

Future<List<({SigningAlgoType algorithm, String publicKey, KeyEntryStatus status})>> get withdrawnSigningKeys

The public half of every signing key this enrollment has taken out of service, each with the status the keyfile gives it — the non-active entries of its advertisement, which keep envelopes signed before the key was withdrawn verifiable.

The status token is carried across verbatim, because the keyfile's vocabulary and the advertisement's are both open: a token a newer build wrote is what this enrollment's owner said about that key.

⚠️ Not filtered by canSignEnvelopeWith, unlike heldSigningKeys: that filter asks what this build can sign with, and these entries exist for other parties to verify with.

Empty when the client has no key source or no keyfile, or when nothing has been withdrawn from service; a keyfile that cannot be read throws.

Implementation

Future<
    List<
        ({
          SigningAlgoType algorithm,
          String publicKey,
          KeyEntryStatus status
        })>> get withdrawnSigningKeys async {
  final keys = await _readKeyfile('withdrawn signing keys');
  if (keys == null) return const [];

  return [
    for (final key in keys.withdrawnSigningKeysFor(enrollmentId))
      (
        algorithm: key.algorithm,
        publicKey: key.publicKey,
        status: KeyEntryStatus.of(key.status),
      ),
  ];
}