On Sun, Aug 25, 2019 at 06:35:38PM -0400, Sasha Levin wrote:
Thanks for looking into this!
On Sun, Aug 25, 2019 at 05:26:37PM +0200, Jörg-Volker Peetz wrote:
Where can I find your public gpg key and it's fingerprint? It's not yet documented on https://www.kernel.org/category/signatures.html .
You're right, I'll send a patch to add my fingerprint as well.
I'm asking because the "gpg --locate-keys" method does not work for me.
I can confirm this, and this is weird... I see a kernel.org UID on the key, and gpg seems to confirm that as well:
$ gpg --quick-add-uid DEA66FF797772CDC 'Sasha Levin sashal@kernel.org' gpg: Such a user ID already exists on this key!
Let me contact kernel.org support to see what I'm doing wrong...
Looks like everything is correct from my end:
$ git tag -v v5.2.10 object f7d5b3dc4792a5fe0a4d6b8106a8f3eb20c3c24c type commit tag v5.2.10 tagger Sasha Levin sashal@kernel.org 1566742490 -0400
This is the 5.2.10 stable release gpg: Signature made Sun 25 Aug 2019 04:14:50 PM CEST gpg: using RSA key E27E5D8A3403A2EF66873BBCDEA66FF797772CDC gpg: Good signature from "Sasha Levin sashal@kernel.org" [unknown] gpg: aka "Sasha Levin sasha.levin@oracle.com" [undefined] gpg: aka "Sasha Levin alexander.levin@verizon.com" [unknown] gpg: aka "Sasha Levin alexander.levin@microsoft.com" [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: E27E 5D8A 3403 A2EF 6687 3BBC DEA6 6FF7 9777 2CDC
I'll go add yours and Ben's fingerprints to the kernel.org website so that others can verify it there.
thanks,
greg k-h