[PULL] Drop signatures by keys that were removed

Uwe Kleine-König <[email protected]> Mon, 7 Apr 2025 23:16:31 +0200
Newsgroups	org.kernel.linux.keys
Message-ID	<onmvaktb7yh2svkau2wc3lcfgsz2q6ntshn53dslg5okd36vmf@tfii4snrvngk>
Hello Konstantin,

the following changes since commit 64a88338d894446c5e17f618b8a19846232ed43b:

  Update 570338B018144F28 (Mattijs Korpershoek) (2025-03-26 09:49:25 -0400)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/ukleinek/pgpkeys.git tags/202504-drop-sigs-by-removed-keys

for you to fetch changes up to ed45fe570ec2a373cc5543071b43fb5b4749b3a4:

  Drop obsolete signatures by Alexander Shishkin (EBC5F624630557FF) (2025-04-07 22:33:54 +0200)

----------------------------------------------------------------
Drop signatures by keys that were removed

On importing new key material the used scripts make sure that keys are
added in a "clean" state. That is (among others), no signatures are
added from keys that are not in the keyring.

In commit 2dd67ee0231c ("Drop all keys that expired in 2023 or before")
several keys were dropped which left some signatures on other keys that
wouldn't have been imported without the now deleted keys.

Remove all these signatures.
----------------------------------------------------------------

I chose to provide these changes only as a pull request, as some of the
patches are huge and given they modify ascii armored binary data, they
are not reviewable anyhow in a mail reader.

To review the changes I recommend running:

	keyringgpghome="$(mktemp -d)"

	cat keys/* | gpg -q --homedir "$keyringgpghome" --import

	gpg --homedir "$keyringgpghome" --no-options --with-colons --list-sigs | sed 1d

	rm -rf "${keyringgpghome}"

before and after merging this series and comparing the output.
The first line of the gpg output is dropped because it contains (I
think) a timestamp of the trust db, which isn't useful information, as
it changes for each import and the trust db is empty here anyhow.

Best regards
Uwe

Uwe Kleine-König (8):
      Drop obsolete signatures by Tejun Heo (19F81DC583926170)
      Drop obsolete signatures by NeilBrown (39EC9EDD566281B9)
      Drop obsolete signatures by Mathieu Poirier (5378A31CC0EC0959)
      Drop obsolete signatures by Inki Dae (573834890C4312B8)
      Drop obsolete signatures by Boris Brezillon (65ED36017E08B700)
      Drop obsolete signatures by Paul Burton (8220D9FA693C1C65)
      Drop obsolete signatures by Andrew Grover (A41EC7315319EDAA)
      Drop obsolete signatures by Alexander Shishkin (EBC5F624630557FF)

 keys/077EA269D5B9D38C.asc |   18 +-
 keys/13A1BABBD606808A.asc |  177 +-
 keys/2EA76B9C2B466D9D.asc | 5582 ++++++++++++++++++++++-----------------------
 keys/442D5E992BA82224.asc |  173 +-
 keys/444D05FEF336F5F3.asc |  649 +++---
 keys/503BF2D40A30BDB9.asc |  623 +++--
 keys/59FF77874E89E813.asc |   39 +-
 keys/6BBF9F19873B518D.asc |  405 ++--
 keys/6CF8CA2F4EC8A8CF.asc |  733 +++---
 keys/774CE9C0981DCA52.asc |  589 +++--
 keys/7A23E466D4A2B81E.asc |  269 ++-
 keys/7EF4F96F2BE9962A.asc | 1346 ++++++-----
 keys/87C1A206239D04FC.asc |   83 +-
 keys/9CCDDF2CDEEBCF53.asc |  394 ++--
 keys/A7C92F7A39BD11DA.asc |  151 +-
 keys/ABAB231F97DF5881.asc |  411 ++--
 keys/BDA06085493BACE4.asc | 3920 ++++++++++++++++---------------
 keys/E56FEF955A4BEDCE.asc | 1032 ++++-----
 keys/E9C315B1AE8CC723.asc |  323 ++-
 19 files changed, 8194 insertions(+), 8723 deletions(-)
signature.asc (application/pgp-signature, 488 B)