Function sanitizeKey

src/modules/key.js:459–490

(key)

 * @return {openpgp.key.Key|null}       the sanitized key or null if is invalid (expired and revoked keys are still considered as valid)
 */
export async function sanitizeKey(key) {
  // filter out users with no or invalid self certificate
  const users = [];
  for (const user of key.users) {
    try {
      const status = await verifyUser(user);
      if (status === KEY_STATUS.no_self_cert ||
          status === KEY_STATUS.invalid) {
        continue;
      }
      users.push(user);
    } catch (e) {}
  }
  key.users = users;
  // discard key without users
  if (!key.users.length) {
    return null;
  }
  // filter out sub keys with no or invalid binding signature
  const subKeys = [];
  for (const subKey of key.subkeys) {
    try {
      const status = await verifySubKey(subKey);
      if (status === KEY_STATUS.invalid) {
        continue;
      }
      subKeys.push(subKey);
    } catch (e) {}
  }
  key.subkeys = subKeys;
  return key;
}

export async function verifyForAddress(key, email) {
  email = email.toLowerCase();