About revoked uids in the kernel keyring repo

Uwe Kleine-König <[email protected]> Fri, 11 Oct 2024 08:25:32 +0200
Newsgroups	org.kernel.linux.keys
Message-ID	<kh5aupxlnhnszkhs44pworjawui6mhwck6zbhsh7wssbumdtq7@yexqh3pb5h5h>
Hello,

some time ago I revoked one of the uids of my key. This revoked uid is
available on the ubuntu keyserver. Still after the last refresh from
keyserver.ubuntu.com (10e718223d7e ("Periodic update from keyservers"))
the uid is still tracked as ok:

	uwe@taurus:~/gsrc/kernel-pgpkeys$ gpg --no-default-keyring --keyring ./test --import keys/E2DCDD9132669BD6.asc
	gpg: keybox './test' created
	gpg: key E2DCDD9132669BD6: 16 signatures not checked due to missing keys
	gpg: key E2DCDD9132669BD6: public key "Uwe Kleine-König <[email protected]>" imported
	gpg: Total number processed: 1
	gpg:               imported: 1
	gpg: no ultimately trusted keys found
	uwe@taurus:~/gsrc/kernel-pgpkeys$ gpg --no-default-keyring --keyring ./test --with-colons --list-keys E2DCDD9132669BD6 | grep ^uid
	uid:-::::1717662465::FC9343E0A10E867989E995C04882884A8F364762::Uwe Kleine-König <[email protected]>::::::::::0:
	uid:-::::1717662475::67B953CFC7FF21DC32EB0EC6D8F232796F0BA924::Uwe Kleine-König <uwe@kleine-könig.de>::::::::::0:
	uid:-::::1717662474::43C4D0A27D6F8CE86F6B3B56F0A4F3BBA7964BA7::Uwe Kleine-König <[email protected]>::::::::::0:
	uid:-::::1561292811::D92B739939E1CF6C8CAAF6351E1B26603D0BC9AA::Uwe Kleine-König <[email protected]>::::::::::0:
	uid:-::::1717662474::D5D83017D782895C4A6CF8599F7080D6AC0BE40B::Uwe Kleine-König <[email protected]>::::::::::0:
	uid:-::::1717662474::8C461F1AD85F1F20B672723D5B0A3E077F7E6F31::Uwe Kleine-König <[email protected]>::::::::::0:
	uid:-::::1717662475::194FB2A6001835954338E049FFFDB6AAE8DE8F9F::Uwe Kleine-König <[email protected]>::::::::::0:
	uid:-::::1717662475::7E218F31504E286A852C2E05459BA0DC22FF34AE::Uwe Kleine-König <[email protected]>::::::::::0:

You see 8 valid uids. When I refresh that from the keyserver, the
@pengutronix.de uid is properly revoked:

	uwe@taurus:~/gsrc/kernel-pgpkeys$ gpg --no-default-keyring --keyring ./test --keyserver keyserver.ubuntu.com --refresh
	gpg: refreshing 1 key from hkp://keyserver.ubuntu.com
	gpg: key E2DCDD9132669BD6: 27 duplicate signatures removed
	gpg: key E2DCDD9132669BD6: "Uwe Kleine-König <[email protected]>" 26 new signatures
	gpg: Total number processed: 1
	gpg:         new signatures: 26
	uwe@taurus:~/gsrc/kernel-pgpkeys$ gpg --no-default-keyring --keyring ./test --with-colons --list-keys E2DCDD9132669BD6 | grep ^uid
	uid:-::::1717662465::FC9343E0A10E867989E995C04882884A8F364762::Uwe Kleine-König <[email protected]>::::::::::0:
	uid:-::::1717662475::67B953CFC7FF21DC32EB0EC6D8F232796F0BA924::Uwe Kleine-König <uwe@kleine-könig.de>::::::::::0:
	uid:-::::1717662474::43C4D0A27D6F8CE86F6B3B56F0A4F3BBA7964BA7::Uwe Kleine-König <[email protected]>::::::::::0:
	uid:r::::::D92B739939E1CF6C8CAAF6351E1B26603D0BC9AA::Uwe Kleine-König <[email protected]>::::::::::0:
	uid:-::::1717662474::D5D83017D782895C4A6CF8599F7080D6AC0BE40B::Uwe Kleine-König <[email protected]>::::::::::0:
	uid:-::::1717662474::8C461F1AD85F1F20B672723D5B0A3E077F7E6F31::Uwe Kleine-König <[email protected]>::::::::::0:
	uid:-::::1717662475::194FB2A6001835954338E049FFFDB6AAE8DE8F9F::Uwe Kleine-König <[email protected]>::::::::::0:
	uid:-::::1717662475::7E218F31504E286A852C2E05459BA0DC22FF34AE::Uwe Kleine-König <[email protected]>::::::::::0:

Would be great to get that revokation into the keyring repo.

Best regards
Uwe
signature.asc (application/pgp-signature, 488 B)