Re: [PATCH pgpkeys] Drop all keys that expired in 2023 or before

Uwe Kleine-König <[email protected]> Fri, 14 Feb 2025 11:58:33 +0100

Newsgroups	org.kernel.linux.keys
Message-ID	<morfuhtm5qnmjqzheimdiultom73xwm4d2ur53odfhoajaeur5@kidqvdgef3ak>

[Dropped the recipents that didn't receive my earlier mail in this
thread. Added the affected people mentioned in this mail instead.]

Hello Konstantin,

On Thu, Feb 13, 2025 at 03:21:56PM -0500, Konstantin Ryabitsev wrote:
> On Mon, Feb 10, 2025 at 12:04:09PM +0100, Uwe Kleine-König wrote:
> > The keys removed here are all expired since at least one year. Given the
> > keyring is regularily synced against different keyservers, it's unlikely
> > their expiry date was updated. 
> 
> Applied, thanks!

Great, IMHO this is a necessary step to keep the keyring in a sane
state.

I intended to send a v2 today with the following changes:

 - Keep 3D8B01079DE0DB06, 237BCB3666CDC698 and 077EA269D5B9D38C as they
   were updated in the mean time.

 - Drop the entries below .keyring/ for the dropped keys.

If you agree this should be fixed, how do we proceed?

Did you check the effect on the web-of-trust of this removal?

Calling export-keyring.py now after removing keys/ and graphs/ says
(among many good log lines):

No valid paths between Linus Torvalds <[email protected]> and Minchan Kim (Minchan's korg account) <[email protected]>
No valid paths between Linus Torvalds <[email protected]> and Alexey Gladkov <[email protected]>
No valid paths between Linus Torvalds <[email protected]> and Ahmad Fatoum <[email protected]>
No valid paths between Linus Torvalds <[email protected]> and CK Hu <[email protected]>
No valid paths between Linus Torvalds <[email protected]> and Stanley Chu <[email protected]>

But I don't understand why there is no path to Ahmad (which is the only
one I checked).

	79BE3E4300411886 Linus Torvalds ->
	E63EDCA9329DD07E Konstantin Ryabitsev ->
	E289A1F4351A51B3 Oleksij Rempel ->
	C3EAC3DE9321D59B Ahmad Fatoum

should still be in place. I guess I'm just holding the wotmate wrong?

Even if a path was broken by the removal, IMHO this isn't necessarily
a problem?!

Best regards
Uwe

signature.asc (application/pgp-signature, 488 B)