Update key expiration date for [email protected]

DISCUSSION Theodore Ts'o 3 participants 7 messages Apr 10, 2025 – Apr 12, 2025

lore

Share & tools

lore

Konstantin Ryabitsev

2025-04-10 14:43 UTC #1 lore raw

On Thu, Apr 10, 2025 at 10:34:55AM -0400, Theodore Ts'o wrote:

Updated, thanks.

-K

Uwe Kleine-König

2025-04-10 15:40 UTC #2 lore raw

Quoted 3 lines · Konstantin Ryabitsev

On Thu, Apr 10, 2025 at 10:34:55AM -0400, Theodore Ts'o wrote:
Updated, thanks.

This is rather odd. The commit you created indeed updated the expiry date on the key, but it also dropped lots of signatures. If I repeat importing Theodore's key, the keys are not dropped for me. (And that's even though I use a gpg version that is affected by
https://dev.gnupg.org/T7583.)

The graph before the import was just "Linus -> tytso", now it's
https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/plain/graphs/D36F769BC11804F0.svg?id=3dab90be2abbe5e36edbad698070ff390ea3f886

Best regards
Uwe

Theodore Ts'o

author

2025-04-11 15:01 UTC #3 lore raw

Quoted 5 lines · Uwe Kleine-König

Quoted 3 lines · Konstantin Ryabitsev
On Thu, Apr 10, 2025 at 10:34:55AM -0400, Theodore Ts'o wrote:
Updated, thanks.

Quoted 8 lines

This is rather odd. The commit you created indeed updated the expiry date on the key, but it also dropped lots of signatures. If I repeat importing Theodore's key, the keys are not dropped for me. (And that's even though I use a gpg version that is affected by
https://dev.gnupg.org/T7583.)
The graph before the import was just "Linus -> tytso", now it's
https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/plain/graphs/D36F769BC11804F0.svg?id=3dab90be2abbe5e36edbad698070ff390ea3f886

Yeah, that's a ltitle unfortunate, since I was originally one of the initial 4 "trusted introducers" when we were setting up the kernel keyring. So dropping the signatures might affect some folks being considered trusted by some GPG configs. I imagine that's much less important these days, though....

- Ted

Uwe Kleine-König

2025-04-12 06:47 UTC #4 lore raw

Hello Ted,

Quoted 12 lines · Theodore Ts'o

Quoted 11 lines · Uwe Kleine-König
Quoted 3 lines · Konstantin Ryabitsev
On Thu, Apr 10, 2025 at 10:34:55AM -0400, Theodore Ts'o wrote:
Updated, thanks.
This is rather odd. The commit you created indeed updated the expiry date on the key, but it also dropped lots of signatures. If I repeat importing Theodore's key, the keys are not dropped for me. (And that's even though I use a gpg version that is affected by
https://dev.gnupg.org/T7583.)

Quoted 8 lines

Quoted 2 lines
The graph before the import was just "Linus -> tytso", now it's
https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/plain/graphs/D36F769BC11804F0.svg?id=3dab90be2abbe5e36edbad698070ff390ea3f886
Yeah, that's a ltitle unfortunate, since I was originally one of the initial 4 "trusted introducers" when we were setting up the kernel keyring. So dropping the signatures might affect some folks being considered trusted by some GPG configs. I imagine that's much less important these days, though....

For someone who already has your key in their local keyring from an earlier revision of the kernel keyring, the update does the right thing, i.e. it just updates the expiry date for your key. So this is only an issue for someone who newly imports your key now.

Also there is no key in the keyring that gets it's trustpath length over the needed length of 4 due to your change.

Still I think we should fix your import or at least understand the issue.

Best regards
Uwe

Konstantin Ryabitsev

2025-04-11 21:17 UTC #5 lore raw

In reply to Uwe Kleine-König

Quoted 8 lines · Uwe Kleine-König

This is rather odd. The commit you created indeed updated the expiry date on the key, but it also dropped lots of signatures. If I repeat importing Theodore's key, the keys are not dropped for me. (And that's even though I use a gpg version that is affected by
https://dev.gnupg.org/T7583.)
The graph before the import was just "Linus -> tytso", now it's
https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/plain/graphs/D36F769BC11804F0.svg?id=3dab90be2abbe5e36edbad698070ff390ea3f886

Aren't we purposefully dropping "algo 2" (sha1) signatures from the graph? I expect this is the reason.

	:signature packet: algo 1, keyid 79BE3E4300411886
			version 4, created 1316641796, md5len 0, sigclass 0x10
			digest algo 2, begin of digest 3f ca
			hashed subpkt 2 len 4 (sig created 2011-09-21)
			subpkt 16 len 8 (issuer key ID 79BE3E4300411886)
			data: [2047 bits]

-K

Uwe Kleine-König

2025-04-12 07:50 UTC #6 lore raw

Quoted 13 lines · Konstantin Ryabitsev

Quoted 8 lines · Uwe Kleine-König
This is rather odd. The commit you created indeed updated the expiry date on the key, but it also dropped lots of signatures. If I repeat importing Theodore's key, the keys are not dropped for me. (And that's even though I use a gpg version that is affected by
https://dev.gnupg.org/T7583.)
The graph before the import was just "Linus -> tytso", now it's
https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/plain/graphs/D36F769BC11804F0.svg?id=3dab90be2abbe5e36edbad698070ff390ea3f886
Aren't we purposefully dropping "algo 2" (sha1) signatures from the graph? I expect this is the reason.

Quoted 6 lines

	:signature packet: algo 1, keyid 79BE3E4300411886
			version 4, created 1316641796, md5len 0, sigclass 0x10
			digest algo 2, begin of digest 3f ca
			hashed subpkt 2 len 4 (sig created 2011-09-21)
			subpkt 16 len 8 (issuer key ID 79BE3E4300411886)
			data: [2047 bits]

Oh, that looks like the relevant point. The 168 signatures that were dropped from Ted's key are all using SHA1 hashes. Note this is not happening due to changes in wotmate, but because gnupg drops these. I just upgraded my gnupg Debian packages from 2.2.46-6 to 2.4.7-13 and can reproduce that now. If I reimport Ted's key there are even a few more signatures dropped (I didn't check deeply, I think this is about older self-signatures).

Looking at:

	$ scripts/kogpg --list-sigs --with-colon | awk -F: '$1 == "pub" { publine = $0 } $1 == "uid" { uidline = $0 } $1 == "sig" && $5 == "79BE3E4300411886" { if (publine) { print publine; publine="" } if (uidline) { print uidline; uidline="" } print $0 }'
	pub:-:4096:1:040F1D49EC9DBB8C:1318384675:::-:::scESC::::::23::0:
	uid:-::::1510116194::21722184B5FEDC261263C558C95C808D7E7D475E::Paul Mackerras <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1382530198::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:07D0453A16B73617:1318971903:::-:::scESC::::::23::0:
	uid:-::::1319049914::69DE86FB76CE4142DDB838629DF2646C3A7615DB::Len Brown <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572652::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318972337::C179AF1C3D2D6C33729562FF3B4364B92109BAA9::Len Brown <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572652::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318971903::47EAB92B44CD5DDD03C869B601B7E201E869C8F8::Len Brown <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572652::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:109F098506FF0B14:1317319759:1946968859::-:::scESC::::::23::0:
	uid:-::::1631608859::C09988350F2268976313AC46F1DD0745D7EB83D3::Thomas Gleixner <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572771::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:17212997986C5765:1469647938:::-:::scESCA::::::23::0:
	uid:-::::1473454517::8B5813F95C4B4EADDC7CF43196287C7748227079::Benson Leung <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226854::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1473454517::BC6D5BFFC9226CD8CAE2CBDF790196348AE70DDB::Benson Leung (Google work) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1473354160::7DB8358CB290D5B63388EC1177CF3B99BA667B5D::Benson Leung (Personal) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1557812569::37E3172ECDB83919C1E6BA0C2CA5092230B1CA74::Benson Leung (kernel.org) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	pub:-:4096:1:20D04E5A713660A7:1317434860:::-:::scESC::::::23::0:
	uid:-::::1317435621::A98DDFD719D0850129FED600D49AB4F2FCC9BC45::Junio C Hamano <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1342803818::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317435605::94B95623A120D154472699791800F509B102D64F::Junio C Hamano <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1342803824::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317435582::7142536458BD89BA8133FBBB897BCFD7C90829B9::Junio C Hamano <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1342803824::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:2DB3C3321B6DDF86:1699972204:::-:::scESC::::::23::0:
	uid:-::::1700089075::4EF3E09A1C4FE7C13495BF6184EB5D5C25F929A7::H. Peter Anvin (signature key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1700108109::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1699998401::634F270269D63B2E22D16FE290474255040BD99C::H. Peter Anvin (signature key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1700108104::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	pub:-:4096:1:2EA76B9C2B466D9D:1315177973:::-:::scESCA::::::23::0:
	uid:-::::1352832216::417964026A30B8CEB32FA236480BD60DB3E04B2F::John Hawley ("Warthog9") <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572533::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1315178363::6F14D6DB1F62F8A32DFD4B3417C2B04193198DCF::John Hawley ("Warthog9") <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572533::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1315178229::5C5D3C0E6C384E08BE67082EDAFD668319464E43::John Hawley ("Warthog9") <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572533::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1315178279::A72A242686A9E10BE5E58BA64463E32E57585A87::John Hawley ("Warthog9") <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572533::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1315177973::29D32A4CE87B8CBA6E7ECED64F23D35CB69DDDC8::John Hawley ("Warthog9") <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572533::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:362D16C8D693AF2A:1317614000:::-:::scESC::::::23::0:
	uid:-::::1317614540::2AF2B9BC67919AEFBFCD47886318A0220B112C36::Keith Packard (4096 bit RSA key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762874::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317614514::882ABBC872251B5BFA81EE6BCE06E0A4E6966446::Keith Packard (4096 bit RSA key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762874::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317614514::4CE96D8948235A12B176711FBB59A02D322F4004::Keith Packard (4096 bit RSA key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762874::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:e:4096:1:377C7F21FE3D1F91:1366211633:1743666248::-:::sc::::::23::0:
	uid:e::::1680594248::8615361B0A6D7A675A4960272098D0E39E1FE8E6::Michal Simek <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1382695039::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:e::::1680594253::77CCE6386DF6EDF9937B79490BDAEDA957FECF83::Michal Simek (Xilinx) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1382695039::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:e::::1680594254::D2C978A9B07FB21934A94C8B14D7827B67DBA8A9::Michal Simek (Xilinx) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1382695039::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:38DBBDC86092693E:1316795861:::-:::scESC::::::23::0:
	uid:-::::1316795861::3BAAD78EF87752C4340B2D958A2BABFB62BF9A89::Greg Kroah-Hartman (Linux kernel stable release signing key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572313::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:2048:1:41DD4B18780D59C4:1317058911:::-:::scESC::::::23::0:
	uid:-::::1317061462::A639523E2C50F53F9C650BD2D20908D5412A70D4::Arjan van de Ven (work related key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572564::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317058911::B584945A5F9EE6C417AA89242F596DC188280584::Arjan van de Ven (Work related key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572564::::Linus Torvalds <[email protected]>:10x:::::2:
	sig:::1:79BE3E4300411886:1319572564::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:435AE3866102DD21:1317664239:::-:::scESC::::::23::0:
	uid:-::::1317664239::3F064FB2B4D4B321E01DFEB7111AB197F90489BE::Roland Dreier <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572960::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:5D3C6CC76ACAFA02:1408467583:::-:::scESC::::::23::0:
	uid:-::::1408467583::B6B3EF4BB3CDBB1863078C86822C338D06A6EA10::Davidlohr Bueso (kernel.org) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1408576586::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:63762CDA67E2F359:1317892353:::-:::scESC::::::23::0:
	uid:-::::1322239151::845FE1EA5780C9D84919B1B84C9C9136901F6BEE::David Woodhouse <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572380::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1322239160::CF4524DB8A43290009BBD3AD7DCB5ACEE627ED62::David Woodhouse <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572380::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1322239160::5CB07CC3EDBFFC02DF44C7B40A99314C8E5DF0D3::David Woodhouse <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572380::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1322239160::FB5B387717C4A9CDEFB04398CF3301226F3D0BE4::David Woodhouse <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572380::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:63B4F0197F3C42E7:1318257341:::-:::scESC::::::23::0:
	uid:-::::1318257341::E02E9AC987B839C1B27ED6FFF8165F0EDFB3DD0B::Mauro Carvalho Chehab <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572460::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:670BE78A960A00F2:1319534919:1777520316::-:::scESC::::::23::0:
	uid:-::::1704944321::9321EC2AE9DCE4E95BCFC2AED4BC0AA390B3C2D7::Trond Myklebust <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573099::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:733AD9848B744C5E:1318152038:::-:::scESC::::::23::0:
	uid:-::::1402632385::2E4568238077E3A24998E29EFD6F04E5CBD8B847::Benjamin Herrenschmidt <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573050::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318152808::9CBCEE86DD0DDC1A43AFCCBD5B9A6F35B15722FB::Benjamin Herrenschmidt <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573050::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318152853::93A5434E2C25E8F2BE14CA1830170E13BEADDEC6::Benjamin Herrenschmidt <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573050::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318152831::9382A8360514B72C26ED14B9CAFD89E6E6E24144::Benjamin Herrenschmidt <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573050::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318152785::AEAB80C871AFBE82A5383D241B15E4FABF040926::Benjamin Herrenschmidt <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573050::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:7647E1A44BC0E4BA:1317325325:::-:::scESC::::::23::0:
	uid:-::::1317325325::CA3CDED8925E4E78E82868931E2FC56D49EB323A::Peter Zijlstra <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572005::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:2048:1:79BE3E4300411886:1316554898:::-:::scESC::::::23::0:
	uid:-::::1511987475::4F4D48B3CDD4F15E28D8380D223E7F35AD67BDB7::Linus Torvalds <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1511987475::::Linus Torvalds <[email protected]>:13x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1316554898::FB51A29A9DF021398A9C921F8BDBF3BE95801D2D::Linus Torvalds <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1316554898::::Linus Torvalds <[email protected]>:13x:::::2:
	sig:::1:79BE3E4300411886:1316554898::::Linus Torvalds <[email protected]>:18x:::::2:
	pub:-:4096:1:7C56ACFE947897D8:1244874883:::-:::scESC::::::23::0:
	uid:-::::1319678867::A727E8D436435B7AD88262DC1D7438BD7F8DEE3C::Anibal Monsalve Salazar <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1389062110::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1319678710::FD41852CFAD00D59585918F39C9D99451D9292ED::Anibal Monsalve Salazar <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1389062110::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:7CC6FC3344B247E2:1319448063:::-:::scESC::::::23::0:
	uid:-::::1319448063::87EF4B5C9878DD4EA52C86C12C6B97D74D0326E1::Mel Gorman (kernel.org) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572991::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:7CF76C1A6E2C4CCE:1317508850:::-:::scESC::::::23::0:
	uid:-::::1317508850::739D1F1D5D544A72A207AC87369B1F16DE1426B0::Randy Dunlap (sign) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762562::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:80A77F6095CDE47E:1317657545:::-:::scESC::::::23::0:
	uid:-::::1318280867::5D2B5C9BA52D750CB4D99F655E9B7864703CB7AB::Stephen Hemminger <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572243::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318280853::A0D0DB798627ECE03C42203D3623EE2FF405DC63::Stephen Hemminger <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572243::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318280867::ECE8DDAC4B243A99E05C8A7241E3A6DE6C312960::Stephen Hemminger <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572243::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1470503337::7675D08E0890DD86DE5A485CE4E99A836F3B1EC1::Stephen Hemminger (Microsoft open source server) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572243::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:2048:1:814AE47C214854D6:1316755024:1773247245::-:::scESCA::::::23::0:
	uid:-::::1615567245::B1D14E04CB1FC285926396573E7CF601B3062A18::James Bottomley <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572746::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1615567256::433F6BC8DF221DF1D6774D1866F50B796288E380::James Bottomley <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572746::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:r::::::776F30790A3F70DE515A45E2223F6CDA0B3A3AFA::James Bottomley <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572746::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:8972F4DFDC6DC026:1285612768:::-:::scESCA::::::23::0:
	uid:-::::1285614370::869D6335304A508586D5D09250F7C4DEB2AE9C3F::Kees Cook <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762799::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1285613966::9378CAC2FDD37B53A5935D5795986A2EDEA5FA43::Kees Cook <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762799::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1285613946::55AF9C8295D9DEA4B917443F92D16DB7A0677EC7::Kees Cook <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762799::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1285613986::5C5ADA11839507410A16A7974E4A564F05779322::Kees Cook <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762799::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317693684::96F0E57F65D5CEBBCED4C29045867661B489B02D::Kees Cook <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762799::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317693669::866BB2E676F4B31E5E2334F30E17F076CE20E0CD::Kees Cook <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1317762799::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:8DCE35563022E57A:1317855131:::-:::scESCA::::::23::0:
	uid:-::::1317855131::DAEBAF1663B751AE4088FAB1A8998F3D0A04844A::Jonathan Corbet <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572483::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:972D5BF4DC613806:1317839703:::-:::scESC::::::23::0:
	uid:-::::1317841368::6A1682EC96F91D3C562BE77D389825FA67CB0F17::John W. Linville <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573515::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317841608::35F9F03C3E59E0D3F2B3EEDC78991103A208D602::John W. Linville <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573515::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317841110::24B581E5640BE9846338933EAAFA88647E095370::John W. Linville <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573515::::Linus Torvalds <[email protected]>:10x:::::2:
	sig:::1:79BE3E4300411886:1319573515::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:9EBF12F372D9FB8C:1317830986:::-:::scESC::::::23::0:
	uid:-::::1317830986::625CE82F04079B5646E03648B49EC21C0064602F::Paul E. McKenney <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572899::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:A84E7FB9A5F2E36C:1317752040:::-:::scESC::::::23::0:
	uid:-::::1317752040::301245024036DA316C660540DBDC83ABAEA280FE::Rafael J. Wysocki <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572050::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:BDA06085493BACE4:1316650243:::-:::scESC::::::23::0:
	uid:-::::1316651990::40EBCD48A35FC1994BFB9F10D85246DEEFF6FBBA::H. Peter Anvin (hpa) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1316653265::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1316651855::4DF997F4636CF13144FAC8B673E55C9B2DBE3851::H. Peter Anvin <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1316653265::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1316651808::D7D9EA47EC3F5BFFA67251D300F4930D103C1DF3::H. Peter Anvin <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1316653265::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:2048:1:C0ADFFFAB1FB1C18:1292494859:::-:::scESC::::::23::0:
	uid:-::::1292494859::1045D3812D98AC1583AE3D305A3D4DB402B2D368::Andi Kleen <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572799::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:C1A460725B51CBCF:1318243484:::-:::scESC::::::23::0:
	uid:-::::1318243484::936E519EF511470B1E7300008E67C35F48EBF931::Andrea Arcangeli <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572036::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:2048:1:C83B0745DF188DFE:1316555422:::-:::scESC::::::23::0:
	uid:-::::1316555503::94E9FBBD80F9E3DC6DF0666892AF083B85B21AE5::Dirk Hohndel <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1316556647::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1316555422::EF50127253C374C3508BDF76A6B6BD4E5249ACE4::Dirk Hohndel <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1316556647::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:C93A8F10916BCA39:1317756903:::-:::scESC::::::23::0:
	uid:-::::1318265261::85B9EC4A14FAF38938BCA6A3CC58C36937B01F60::Jesse Sayer Barnes <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572677::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1318265245::3EFE5B41B35ED78A7804FE7D355FE97B78D62DE0::Jesse Sayer Barnes <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572677::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:E63EDCA9329DD07E:1320705259:::-:::scESCA::::::23::0:
	uid:-::::1742847133::43678676DF8D2E0036988036E2A32EA49D8A4F37::Konstantin Ryabitsev <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1445843887::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1742847117::D12B13B70EC11508C6F70B4EBAD3D5BB97207654::Konstantin Ryabitsev <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1445843887::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1742847134::16041CE3484A4522BDDCB8FFDAD3FCBE82A05A97::Konstantin Ryabitsev (Fedora) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1445843887::::Linus Torvalds <[email protected]>:10x:::::2:
	sig:::1:79BE3E4300411886:1445843887::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:EB751458FA118320:1319373607:::-:::scESC::::::23::0:
	uid:-::::1319373607::DB3717AFC9565F2B895BAE9F99614BC9B78EE816::James Morris <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572501::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:EBC26CDB5A56DE73:1317327516:::-:::scESC::::::23::0:
	uid:-::::1476725536::FB5CD963FCD77A3E0C0392F99CD2A6743D57CB45::Steven Rostedt (Der Hacker) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319573079::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:EF1F7EB8765E435D:1377387001:::-:::scESCA::::::23::0:
	uid:-::::1377387234::DDA08C2934681DF15DBA0FBD479A581FA3C41B2A::Rafael J. Wysocki <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1380736289::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1377387131::ADB29541942884607E97A19F8D5DECAED969963A::Rafael J. Wysocki <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1380736289::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:F4E7901BE4ADAC64:1317677784:::-:::scESCA::::::23::0:
	uid:-::::1643297785::4574BA535EF9FB0D05782940839B144B7AE649EB::Russell King <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572345::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1319151515::BC0257BBB54A4BFD2CFA92956CC64D4BFE5FE59E::Russell King <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572345::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:F7D358FB2971E0A6:1318832518:::-:::scESC::::::23::0:
	uid:-::::1318833051::6FDD9AE6EDE51A82485BF13E36AB5BA379B98C3B::Jens Axboe <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572089::::Linus Torvalds <[email protected]>:10x:::::2:
	sig:::1:79BE3E4300411886:1319572089::::Linus Torvalds <[email protected]>:10x:::::2:
	pub:-:4096:1:FBB7576BA7CB0B6B:1317814277:::-:::scESC::::::23::0:
	uid:-::::1317856952::21CF66747373995BDD0CDA878C032991ACDD0B38::David Howells <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572112::::Linus Torvalds <[email protected]>:10x:::::2:
	uid:-::::1317814277::E79DFFFCA08CA4AE07A9960B20F5051194F50BFB::David Howells <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1319572112::::Linus Torvalds <[email protected]>:10x:::::2:

(kogpg is a script that imports the current keyring in a temp gpgdir and then calls gpg on that import with the given parameters.)

There are currently 40 keys with in sum 91 signatures by Linus. 85 of these signatures are using SHA-1 (see the 2 in field 16 of the sig lines).

So currently only the following keys are considered properly signed by Linus:

	$ scripts/kogpg --list-sigs --with-colon | awk -F: '$1 == "pub" { publine = $0 } $1 == "uid" { uidline = $0 } $1 == "sig" && $5 == "79BE3E4300411886" && $16 != "2" { if (publine) { print publine; publine="" } if (uidline) { print uidline; uidline="" } print $0 }'
	pub:-:4096:1:17212997986C5765:1469647938:::-:::scESCA::::::23::0:
	uid:-::::1473454517::8B5813F95C4B4EADDC7CF43196287C7748227079::Benson Leung <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226854::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1473454517::BC6D5BFFC9226CD8CAE2CBDF790196348AE70DDB::Benson Leung (Google work) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1473354160::7DB8358CB290D5B63388EC1177CF3B99BA667B5D::Benson Leung (Personal) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1557812569::37E3172ECDB83919C1E6BA0C2CA5092230B1CA74::Benson Leung (kernel.org) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1568226858::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	pub:-:4096:1:2DB3C3321B6DDF86:1699972204:::-:::scESC::::::23::0:
	uid:-::::1700089075::4EF3E09A1C4FE7C13495BF6184EB5D5C25F929A7::H. Peter Anvin (signature key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1700108109::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	uid:-::::1699998401::634F270269D63B2E22D16FE290474255040BD99C::H. Peter Anvin (signature key) <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1700108104::::Linus Torvalds <[email protected]>:10x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:
	pub:-:2048:1:79BE3E4300411886:1316554898:::-:::scESC::::::23::0:
	uid:-::::1511987475::4F4D48B3CDD4F15E28D8380D223E7F35AD67BDB7::Linus Torvalds <[email protected]>::::::::::0:
	sig:::1:79BE3E4300411886:1511987475::::Linus Torvalds <[email protected]>:13x::ABAF11C65A2970B130ABE3C479BE3E4300411886:::8:

Ignoring Linus' own key with his self signature that leaves us with two keys that are directly trusted by Linus and so can be used to create the WoT. If I reimport all keys with that new gnupg version there are only 80 keys left that are properly reachable from Linus' key (among them my key 😅).

If I drop the lint check the number of keys that pass the reimport step increases to 111 (and then also contains Linus' key).

Best regards
Uwe