Re: Update key expiration date for [email protected]

Uwe Kleine-König <[email protected]> Sat, 12 Apr 2025 09:50:39 +0200
Newsgroups	org.kernel.linux.keys
Message-ID	<gebl7ihrxlhfjecmotqxe3filkxfj57kws2xntlpc7jkgzqre3@eelot2tc33yr>
On Fri, Apr 11, 2025 at 05:17:44PM -0400, Konstantin Ryabitsev wrote:
> On Thu, Apr 10, 2025 at 05:40:28PM +0200, Uwe Kleine-König wrote:
> > This is rather odd. The commit you created indeed updated the expiry
> > date on the key, but it also dropped lots of signatures. If I repeat
> > importing Theodore's key, the keys are not dropped for me. (And that's
> > even though I use a gpg version that is affected by
> > https://dev.gnupg.org/T7583.)
> > 
> > The graph before the import was just "Linus -> tytso", now it's
> > https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/plain/graphs/D36F769BC11804F0.svg?id=3dab90be2abbe5e36edbad698070ff390ea3f886
> 
> Aren't we purposefully dropping "algo 2" (sha1) signatures from the graph? I
> expect this is the reason.
> 
> 	:signature packet: algo 1, keyid 79BE3E4300411886
> 			version 4, created 1316641796, md5len 0, sigclass 0x10
> 			digest algo 2, begin of digest 3f ca
> 			hashed subpkt 2 len 4 (sig created 2011-09-21)
> 			subpkt 16 len 8 (issuer key ID 79BE3E4300411886)
> 			data: [2047 bits]

Oh, that looks like the relevant point. The 168 signatures that were
dropped from Ted's key are all using SHA1 hashes. Note this is not
happening due to changes in wotmate, but because gnupg drops these. I
just upgraded my gnupg Debian packages from 2.2.46-6 to 2.4.7-13 and can
reproduce that now. If I reimport Ted's key there are even a few more
signatures dropped (I didn't check deeply, I think this is about older
self-signatures).

Looking at:

	$ scripts/kogpg --list-sigs --with-colon | awk -F: '$1 == "pub" { publine = $0 } $1 == "uid" { uidline = $0 } $1 == "sig" && $5 == "79BE3E4300411886" { if (publine) { print publine; publine="" } if (uidline) { print uidline; uidline="" } print $0 }'
	pub:-:4096:1:040F1D49EC9DBB8C:1318384675:::-:::scESC::::::23::0:
	uid:-::::1510116194::21722184B5FEDC261263C558C95C808D7E7D475E::Paul Mackerras <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1382530198::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:07D0453A16B73617:1318971903:::-:::scESC::::::23::0:
	uid:-::::1319049914::69DE86FB76CE4142DDB838629DF2646C3A7615DB::Len Brown <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572652::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318972337::C179AF1C3D2D6C33729562FF3B4364B92109BAA9::Len Brown <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572652::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318971903::47EAB92B44CD5DDD03C869B601B7E201E869C8F8::Len Brown <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572652::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:109F098506FF0B14:1317319759:1946968859::-:::scESC::::::23::0:
	uid:-::::1631608859::C09988350F2268976313AC46F1DD0745D7EB83D3::Thomas Gleixner <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572771::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:17212997986C5765:1469647938:::-:::scESCA::::::23::0:
	uid:-::::1473454517::8B5813F95C4B4EADDC7CF43196287C7748227079::Benson Leung <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226854::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1473454517::BC6D5BFFC9226CD8CAE2CBDF790196348AE70DDB::Benson Leung (Google work) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1473354160::7DB8358CB290D5B63388EC1177CF3B99BA667B5D::Benson Leung (Personal) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1557812569::37E3172ECDB83919C1E6BA0C2CA5092230B1CA74::Benson Leung (kernel.org) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	pub:-:4096:1:20D04E5A713660A7:1317434860:::-:::scESC::::::23::0:
	uid:-::::1317435621::A98DDFD719D0850129FED600D49AB4F2FCC9BC45::Junio C Hamano <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1342803818::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317435605::94B95623A120D154472699791800F509B102D64F::Junio C Hamano <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1342803824::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317435582::7142536458BD89BA8133FBBB897BCFD7C90829B9::Junio C Hamano <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1342803824::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:2DB3C3321B6DDF86:1699972204:::-:::scESC::::::23::0:
	uid:-::::1700089075::4EF3E09A1C4FE7C13495BF6184EB5D5C25F929A7::H. Peter Anvin (signature key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1700108109::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1699998401::634F270269D63B2E22D16FE290474255040BD99C::H. Peter Anvin (signature key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1700108104::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	pub:-:4096:1:2EA76B9C2B466D9D:1315177973:::-:::scESCA::::::23::0:
	uid:-::::1352832216::417964026A30B8CEB32FA236480BD60DB3E04B2F::John Hawley ("Warthog9") <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572533::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1315178363::6F14D6DB1F62F8A32DFD4B3417C2B04193198DCF::John Hawley ("Warthog9") <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572533::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1315178229::5C5D3C0E6C384E08BE67082EDAFD668319464E43::John Hawley ("Warthog9") <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572533::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1315178279::A72A242686A9E10BE5E58BA64463E32E57585A87::John Hawley ("Warthog9") <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572533::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1315177973::29D32A4CE87B8CBA6E7ECED64F23D35CB69DDDC8::John Hawley ("Warthog9") <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572533::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:362D16C8D693AF2A:1317614000:::-:::scESC::::::23::0:
	uid:-::::1317614540::2AF2B9BC67919AEFBFCD47886318A0220B112C36::Keith Packard (4096 bit RSA key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762874::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317614514::882ABBC872251B5BFA81EE6BCE06E0A4E6966446::Keith Packard (4096 bit RSA key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762874::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317614514::4CE96D8948235A12B176711FBB59A02D322F4004::Keith Packard (4096 bit RSA key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762874::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:e:4096:1:377C7F21FE3D1F91:1366211633:1743666248::-:::sc::::::23::0:
	uid:e::::1680594248::8615361B0A6D7A675A4960272098D0E39E1FE8E6::Michal Simek <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1382695039::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:e::::1680594253::77CCE6386DF6EDF9937B79490BDAEDA957FECF83::Michal Simek (Xilinx) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1382695039::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:e::::1680594254::D2C978A9B07FB21934A94C8B14D7827B67DBA8A9::Michal Simek (Xilinx) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1382695039::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:38DBBDC86092693E:1316795861:::-:::scESC::::::23::0:
	uid:-::::1316795861::3BAAD78EF87752C4340B2D958A2BABFB62BF9A89::Greg Kroah-Hartman (Linux kernel stable release signing key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572313::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:2048:1:41DD4B18780D59C4:1317058911:::-:::scESC::::::23::0:
	uid:-::::1317061462::A639523E2C50F53F9C650BD2D20908D5412A70D4::Arjan van de Ven (work related key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572564::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317058911::B584945A5F9EE6C417AA89242F596DC188280584::Arjan van de Ven (Work related key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572564::::Linus Torvalds <[email protected]>:10x:::::2:
	sig:::1:79BE3E4300411886:1319572564::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:435AE3866102DD21:1317664239:::-:::scESC::::::23::0:
	uid:-::::1317664239::3F064FB2B4D4B321E01DFEB7111AB197F90489BE::Roland Dreier <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572960::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:5D3C6CC76ACAFA02:1408467583:::-:::scESC::::::23::0:
	uid:-::::1408467583::B6B3EF4BB3CDBB1863078C86822C338D06A6EA10::Davidlohr Bueso (kernel.org) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1408576586::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:63762CDA67E2F359:1317892353:::-:::scESC::::::23::0:
	uid:-::::1322239151::845FE1EA5780C9D84919B1B84C9C9136901F6BEE::David Woodhouse <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572380::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1322239160::CF4524DB8A43290009BBD3AD7DCB5ACEE627ED62::David Woodhouse <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572380::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1322239160::5CB07CC3EDBFFC02DF44C7B40A99314C8E5DF0D3::David Woodhouse <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572380::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1322239160::FB5B387717C4A9CDEFB04398CF3301226F3D0BE4::David Woodhouse <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572380::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:63B4F0197F3C42E7:1318257341:::-:::scESC::::::23::0:
	uid:-::::1318257341::E02E9AC987B839C1B27ED6FFF8165F0EDFB3DD0B::Mauro Carvalho Chehab <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572460::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:670BE78A960A00F2:1319534919:1777520316::-:::scESC::::::23::0:
	uid:-::::1704944321::9321EC2AE9DCE4E95BCFC2AED4BC0AA390B3C2D7::Trond Myklebust <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573099::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:733AD9848B744C5E:1318152038:::-:::scESC::::::23::0:
	uid:-::::1402632385::2E4568238077E3A24998E29EFD6F04E5CBD8B847::Benjamin Herrenschmidt <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573050::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318152808::9CBCEE86DD0DDC1A43AFCCBD5B9A6F35B15722FB::Benjamin Herrenschmidt <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573050::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318152853::93A5434E2C25E8F2BE14CA1830170E13BEADDEC6::Benjamin Herrenschmidt <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573050::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318152831::9382A8360514B72C26ED14B9CAFD89E6E6E24144::Benjamin Herrenschmidt <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573050::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318152785::AEAB80C871AFBE82A5383D241B15E4FABF040926::Benjamin Herrenschmidt <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573050::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:7647E1A44BC0E4BA:1317325325:::-:::scESC::::::23::0:
	uid:-::::1317325325::CA3CDED8925E4E78E82868931E2FC56D49EB323A::Peter Zijlstra <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572005::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:2048:1:79BE3E4300411886:1316554898:::-:::scESC::::::23::0:
	uid:-::::1511987475::4F4D48B3CDD4F15E28D8380D223E7F35AD67BDB7::Linus Torvalds <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1511987475::::Linus Torvalds <[email protected]>:13x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1316554898::FB51A29A9DF021398A9C921F8BDBF3BE95801D2D::Linus Torvalds <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1316554898::::Linus Torvalds <[email protected]>:13x:::::2:
	sig:::1:79BE3E4300411886:1316554898::::Linus Torvalds <[email protected]>:18x:::::2:
	pub:-:4096:1:7C56ACFE947897D8:1244874883:::-:::scESC::::::23::0:
	uid:-::::1319678867::A727E8D436435B7AD88262DC1D7438BD7F8DEE3C::Anibal Monsalve Salazar <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1389062110::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1319678710::FD41852CFAD00D59585918F39C9D99451D9292ED::Anibal Monsalve Salazar <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1389062110::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:7CC6FC3344B247E2:1319448063:::-:::scESC::::::23::0:
	uid:-::::1319448063::87EF4B5C9878DD4EA52C86C12C6B97D74D0326E1::Mel Gorman (kernel.org) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572991::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:7CF76C1A6E2C4CCE:1317508850:::-:::scESC::::::23::0:
	uid:-::::1317508850::739D1F1D5D544A72A207AC87369B1F16DE1426B0::Randy Dunlap (sign) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762562::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:80A77F6095CDE47E:1317657545:::-:::scESC::::::23::0:
	uid:-::::1318280867::5D2B5C9BA52D750CB4D99F655E9B7864703CB7AB::Stephen Hemminger <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572243::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318280853::A0D0DB798627ECE03C42203D3623EE2FF405DC63::Stephen Hemminger <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572243::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318280867::ECE8DDAC4B243A99E05C8A7241E3A6DE6C312960::Stephen Hemminger <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572243::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1470503337::7675D08E0890DD86DE5A485CE4E99A836F3B1EC1::Stephen Hemminger (Microsoft open source server) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572243::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:2048:1:814AE47C214854D6:1316755024:1773247245::-:::scESCA::::::23::0:
	uid:-::::1615567245::B1D14E04CB1FC285926396573E7CF601B3062A18::James Bottomley <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572746::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1615567256::433F6BC8DF221DF1D6774D1866F50B796288E380::James Bottomley <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572746::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:r::::::776F30790A3F70DE515A45E2223F6CDA0B3A3AFA::James Bottomley <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572746::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:8972F4DFDC6DC026:1285612768:::-:::scESCA::::::23::0:
	uid:-::::1285614370::869D6335304A508586D5D09250F7C4DEB2AE9C3F::Kees Cook <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762799::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1285613966::9378CAC2FDD37B53A5935D5795986A2EDEA5FA43::Kees Cook <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762799::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1285613946::55AF9C8295D9DEA4B917443F92D16DB7A0677EC7::Kees Cook <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762799::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1285613986::5C5ADA11839507410A16A7974E4A564F05779322::Kees Cook <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762799::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317693684::96F0E57F65D5CEBBCED4C29045867661B489B02D::Kees Cook <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762799::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317693669::866BB2E676F4B31E5E2334F30E17F076CE20E0CD::Kees Cook <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762799::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:8DCE35563022E57A:1317855131:::-:::scESCA::::::23::0:
	uid:-::::1317855131::DAEBAF1663B751AE4088FAB1A8998F3D0A04844A::Jonathan Corbet <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572483::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:972D5BF4DC613806:1317839703:::-:::scESC::::::23::0:
	uid:-::::1317841368::6A1682EC96F91D3C562BE77D389825FA67CB0F17::John W. Linville <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573515::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317841608::35F9F03C3E59E0D3F2B3EEDC78991103A208D602::John W. Linville <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573515::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317841110::24B581E5640BE9846338933EAAFA88647E095370::John W. Linville <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573515::::Linus Torvalds <[email protected]>:10x:::::2:
	sig:::1:79BE3E4300411886:1319573515::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:9EBF12F372D9FB8C:1317830986:::-:::scESC::::::23::0:
	uid:-::::1317830986::625CE82F04079B5646E03648B49EC21C0064602F::Paul E. McKenney <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572899::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:A84E7FB9A5F2E36C:1317752040:::-:::scESC::::::23::0:
	uid:-::::1317752040::301245024036DA316C660540DBDC83ABAEA280FE::Rafael J. Wysocki <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572050::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:BDA06085493BACE4:1316650243:::-:::scESC::::::23::0:
	uid:-::::1316651990::40EBCD48A35FC1994BFB9F10D85246DEEFF6FBBA::H. Peter Anvin (hpa) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1316653265::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1316651855::4DF997F4636CF13144FAC8B673E55C9B2DBE3851::H. Peter Anvin <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1316653265::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1316651808::D7D9EA47EC3F5BFFA67251D300F4930D103C1DF3::H. Peter Anvin <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1316653265::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:2048:1:C0ADFFFAB1FB1C18:1292494859:::-:::scESC::::::23::0:
	uid:-::::1292494859::1045D3812D98AC1583AE3D305A3D4DB402B2D368::Andi Kleen <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572799::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:C1A460725B51CBCF:1318243484:::-:::scESC::::::23::0:
	uid:-::::1318243484::936E519EF511470B1E7300008E67C35F48EBF931::Andrea Arcangeli <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572036::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:2048:1:C83B0745DF188DFE:1316555422:::-:::scESC::::::23::0:
	uid:-::::1316555503::94E9FBBD80F9E3DC6DF0666892AF083B85B21AE5::Dirk Hohndel <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1316556647::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1316555422::EF50127253C374C3508BDF76A6B6BD4E5249ACE4::Dirk Hohndel <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1316556647::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:C93A8F10916BCA39:1317756903:::-:::scESC::::::23::0:
	uid:-::::1318265261::85B9EC4A14FAF38938BCA6A3CC58C36937B01F60::Jesse Sayer Barnes <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572677::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318265245::3EFE5B41B35ED78A7804FE7D355FE97B78D62DE0::Jesse Sayer Barnes <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572677::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:E63EDCA9329DD07E:1320705259:::-:::scESCA::::::23::0:
	uid:-::::1742847133::43678676DF8D2E0036988036E2A32EA49D8A4F37::Konstantin Ryabitsev <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1445843887::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1742847117::D12B13B70EC11508C6F70B4EBAD3D5BB97207654::Konstantin Ryabitsev <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1445843887::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1742847134::16041CE3484A4522BDDCB8FFDAD3FCBE82A05A97::Konstantin Ryabitsev (Fedora) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1445843887::::Linus Torvalds <[email protected]>:10x:::::2:
	sig:::1:79BE3E4300411886:1445843887::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:EB751458FA118320:1319373607:::-:::scESC::::::23::0:
	uid:-::::1319373607::DB3717AFC9565F2B895BAE9F99614BC9B78EE816::James Morris <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572501::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:EBC26CDB5A56DE73:1317327516:::-:::scESC::::::23::0:
	uid:-::::1476725536::FB5CD963FCD77A3E0C0392F99CD2A6743D57CB45::Steven Rostedt (Der Hacker) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573079::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:EF1F7EB8765E435D:1377387001:::-:::scESCA::::::23::0:
	uid:-::::1377387234::DDA08C2934681DF15DBA0FBD479A581FA3C41B2A::Rafael J. Wysocki <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1380736289::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1377387131::ADB29541942884607E97A19F8D5DECAED969963A::Rafael J. Wysocki <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1380736289::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:F4E7901BE4ADAC64:1317677784:::-:::scESCA::::::23::0:
	uid:-::::1643297785::4574BA535EF9FB0D05782940839B144B7AE649EB::Russell King <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572345::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1319151515::BC0257BBB54A4BFD2CFA92956CC64D4BFE5FE59E::Russell King <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572345::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:F7D358FB2971E0A6:1318832518:::-:::scESC::::::23::0:
	uid:-::::1318833051::6FDD9AE6EDE51A82485BF13E36AB5BA379B98C3B::Jens Axboe <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572089::::Linus Torvalds <[email protected]>:10x:::::2:
	sig:::1:79BE3E4300411886:1319572089::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:FBB7576BA7CB0B6B:1317814277:::-:::scESC::::::23::0:
	uid:-::::1317856952::21CF66747373995BDD0CDA878C032991ACDD0B38::David Howells <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572112::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317814277::E79DFFFCA08CA4AE07A9960B20F5051194F50BFB::David Howells <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572112::::Linus Torvalds <[email protected]>:10x:::::2:

(kogpg is a script that imports the current keyring in a temp gpgdir and
then calls gpg on that import with the given parameters.)

There are currently 40 keys with in sum 91 signatures by Linus. 85 of
these signatures are using SHA-1 (see the 2 in field 16 of the sig
lines).

So currently only the following keys are considered properly signed by
Linus:

	$ scripts/kogpg --list-sigs --with-colon | awk -F: '$1 == "pub" { publine = $0 } $1 == "uid" { uidline = $0 } $1 == "sig" && $5 == "79BE3E4300411886" && $16 != "2" { if (publine) { print publine; publine="" } if (uidline) { print uidline; uidline="" } print $0 }'
	pub:-:4096:1:17212997986C5765:1469647938:::-:::scESCA::::::23::0:
	uid:-::::1473454517::8B5813F95C4B4EADDC7CF43196287C7748227079::Benson Leung <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226854::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1473454517::BC6D5BFFC9226CD8CAE2CBDF790196348AE70DDB::Benson Leung (Google work) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1473354160::7DB8358CB290D5B63388EC1177CF3B99BA667B5D::Benson Leung (Personal) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1557812569::37E3172ECDB83919C1E6BA0C2CA5092230B1CA74::Benson Leung (kernel.org) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	pub:-:4096:1:2DB3C3321B6DDF86:1699972204:::-:::scESC::::::23::0:
	uid:-::::1700089075::4EF3E09A1C4FE7C13495BF6184EB5D5C25F929A7::H. Peter Anvin (signature key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1700108109::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1699998401::634F270269D63B2E22D16FE290474255040BD99C::H. Peter Anvin (signature key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1700108104::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	pub:-:2048:1:79BE3E4300411886:1316554898:::-:::scESC::::::23::0:
	uid:-::::1511987475::4F4D48B3CDD4F15E28D8380D223E7F35AD67BDB7::Linus Torvalds <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1511987475::::Linus Torvalds <[email protected]>:13x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:

Ignoring Linus' own key with his self signature that leaves us with two
keys that are directly trusted by Linus and so can be used to create the
WoT. If I reimport all keys with that new gnupg version there are only
80 keys left that are properly reachable from Linus' key (among them my
key 😅).

If I drop the lint check the number of keys that pass the reimport step
increases to 111 (and then also contains Linus' key).

Best regards
Uwe
signature.asc (application/pgp-signature, 488 B)