Re: Please add key for Vineet Gupta (ARC maintainer)

Uwe Kleine-König <[email protected]> Fri, 13 Jun 2025 11:49:05 +0200

Newsgroups	org.kernel.linux.keys
Message-ID	<mxya6iam6nhrdhj5ens4j3ll6mth7uwwygari3wvbpanxllbgg@pv5nte4y56nt>

hello Vineet,

On Thu, Jun 12, 2025 at 02:52:52PM -0700, Vineet Gupta wrote:
> 
> 
> On 6/12/25 14:08, Konstantin Ryabitsev wrote:
> > On Thu, 12 Jun 2025 at 16:59, Vineet Gupta <[email protected]> wrote:
> >>> Before creating your next UID is suggest you read
> >>> https://dkg.fifthhorseman.net/blog/openpgp-user-id-comments-considered-harmful.html
> >> Thx for the pointer. It makes sense.
> >> Shall I remove them from existing key and send it over again (I see it hasn't
> >> been pushed yet to the repo)
> > Yes, if you want to do that, I will hold off on processing this request.
> 
> Thx, here you go !
> 
> pub   rsa4096 2013-02-16 [SC] [expires: 2029-12-08]
>       397A6E0AE47A85E76B74B08969D7F1DDE28AC25E
> uid           [ultimate] Vineet Gupta <[email protected]>
> uid           [ultimate] Vineet Gupta <[email protected]>
> uid           [ultimate] Vineet Gupta <[email protected]>
> uid           [ultimate] [jpeg image of size 24452]

That looks better now. The scripts used to maintain the kernel keyring
will accept that key update, however your new primary UID has no
3rd-party signatures. And also note that the signatures on your older
UIDs are all done using SHA-1 so they will be discarded on reimport. In
sum there is no valid trust path from Linus to your key.

It would be great if you could get a few fresh signatures on your
kernel.org UID. The guys who signed your other UIDs earlier might be
good candidates to sign that without the need to arrange a meeting in
real live.

Also your key is affected by SHA-1 self signatures on the older UIDs.
The respective output of `sq cert lint` is:

	Certificate 69D7F1DDE28AC25E contains a User ID (Vineet Gupta (alias) <[email protected]>) protected by SHA-1
	Certificate 69D7F1DDE28AC25E contains a User ID (Vineet Gupta (official) <[email protected]>) protected by SHA-1
	Certificate 69D7F1DDE28AC25E contains a User ID (Vineet Gupta (personal) <[email protected]>) protected by SHA-1

See
https://www.kleine-koenig.org/~uwe/resign-sha1/?certid=69D7F1DDE28AC25E
for some details. Also
https://lore.kernel.org/keys/fxotnlhsyl2frp54xtguy7ryrucuwselanazixeax3motyyoo3@7vf7ip6gxyvx/
might be good to understand.

Best regards
Uwe

signature.asc (application/pgp-signature, 488 B)