cokiki replace ssh-server key.

1 files changed, 11 insertions, 1 deletions

diff --git a/lib/KeyRing.hs b/lib/KeyRing.hs
index 74b883f..8a4d870 100644
--- a/lib/KeyRing.hs
+++ b/lib/KeyRing.hs
@@ -329,7 +329,7 @@ data StreamInfo = StreamInfo
     -- ^ If 'typ' is 'PEMFile' and an 'External' 'initializer' string is set,
     -- then it is interpretted as a shell command that may be used to create
     -- the key if it does not exist.
-    , transforms :: [Transform] 
+    , transforms :: [Transform]
     -- ^ Per-file transformations that occur before the contents of a file are
     -- spilled into the common pool.
     }
@@ -431,6 +431,9 @@ data Transform =
         | DeleteSubkeyByFingerprint String
         -- ^ Delete the subkey specified by the given fingerprint and any
         -- associated signatures on that key.
+        | DeleteSubkeyByUsage String
+        -- ^ Delete the subkey specified by the given fingerprint and any
+        -- associated signatures on that key.
  deriving (Eq,Ord,Show)
 
 -- | This type describes an idempotent transformation (merge or import) on a
@@ -2695,6 +2698,13 @@ resolveTransform (DeleteSubkeyByFingerprint fp) rt kd@(KeyData k ksigs umap subm
         guard (map toUpper fp == fingerprint (packet (subkeyMappedPacket sub)))
         return k
 
+resolveTransform (DeleteSubkeyByUsage tag) rt kd@(KeyData k ksigs umap submap) = fmap (SubKeyDeletion topk) subk
+ where
+    topk = keykey $ packet k -- key to master of key to be deleted
+    subk = do
+        (k,SubKey p sigs) <- Map.toList submap
+        take 1 $ filter (has_tag tag) $ map (packet . fst) sigs
+        return k
 
 -- | Load and update key files according to the specified 'KeyRingOperation'.
 runKeyRing :: KeyRingOperation -> IO (KikiResult KeyRingRuntime)