Re: [PATCH 0/7] Remove expired keys, 2024 edition

Joel Granados <[email protected]> Wed, 6 Aug 2025 11:20:34 +0200

Newsgroups	org.kernel.linux.keys
Message-ID	<t4dynynvvtujdi2jz7jo4cyo4z6z5cxqh5swsdn7lmsa3fyq7n@czej5r32ngrl>

On Tue, Aug 05, 2025 at 10:57:55PM +0200, Uwe Kleine-König wrote:
> Hello Joel,
> 
> On Tue, Aug 05, 2025 at 06:42:25PM +0200, Joel Granados wrote:
> > On Tue, Aug 05, 2025 at 09:59:01AM +0200, Uwe Kleine-König wrote:
> > >   Remove expired signing subkey of Joel Granados
> > 
> > Thanks for this. I had update my signing key but forgot to remove the
> > expired one. I use my updated Signing key that expires in 2027, so all
> > good from my side.
> 
> Maybe I state the obvious, but to maybe save you some trouble: You have
> to revoke the subkey if you want to get rid of it; not delete it. I
The change that I was thinking was actually updating my SEA key to just
S and pushing it to the pgpkeys repo. So I had no need to revoke that
one. Commit "a23ccb8 Update 5895FAAC338C6E77 (Joel Granados)" in [1].

The expired one came in on an update from keyserver.ubuntu.com Commit
"50066c0 (HEAD) Periodic update from keyserver.ubuntu.com" in [1]. And
that one was probably an inadvertent sync from my part since I try not
to use the keyservers. I'll be sure to revoke it once I have access to
my private key.

> didn't test, but I guess after the patch the subkey will be added back
> on the next keyserver sync. The same would happen to you.
I think you are right. But I have a question here. What key server
should we use? https://keys.openpgp.org/upload/ (as described in [2]) or
should we use keyserver.ubuntu.com?

Best


[1] https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git
[2] https://korg.docs.kernel.org/pgpkeys.html
-- 

Joel Granados

signature.asc (application/pgp-signature, 659 B)