Re: Linux 5.2.10

[Greg KH <gregkh@linuxfoundation.org>]

On Sun, Aug 25, 2019 at 06:35:38PM -0400, Sasha Levin wrote:
> Thanks for looking into this!
> 
> On Sun, Aug 25, 2019 at 05:26:37PM +0200, Jörg-Volker Peetz wrote:
> > Where can I find your public gpg key and it's fingerprint?
> > It's not yet documented on https://www.kernel.org/category/signatures.html .
> 
> You're right, I'll send a patch to add my fingerprint as well.
> 
> > I'm asking because the "gpg --locate-keys" method does not work for me.
> 
> I can confirm this, and this is weird... I see a kernel.org UID on the
> key, and gpg seems to confirm that as well:
> 
> $ gpg --quick-add-uid DEA66FF797772CDC 'Sasha Levin <sashal@kernel.org>'
> gpg: Such a user ID already exists on this key!
> 
> Let me contact kernel.org support to see what I'm doing wrong...

Looks like everything is correct from my end:

$ git tag -v v5.2.10
object f7d5b3dc4792a5fe0a4d6b8106a8f3eb20c3c24c
type commit
tag v5.2.10
tagger Sasha Levin <sashal@kernel.org> 1566742490 -0400

This is the 5.2.10 stable release
gpg: Signature made Sun 25 Aug 2019 04:14:50 PM CEST
gpg:                using RSA key E27E5D8A3403A2EF66873BBCDEA66FF797772CDC
gpg: Good signature from "Sasha Levin <sashal@kernel.org>" [unknown]
gpg:                 aka "Sasha Levin <sasha.levin@oracle.com>" [undefined]
gpg:                 aka "Sasha Levin <alexander.levin@verizon.com>" [unknown]
gpg:                 aka "Sasha Levin <alexander.levin@microsoft.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: E27E 5D8A 3403 A2EF 6687  3BBC DEA6 6FF7 9777 2CDC

I'll go add yours and Ben's fingerprints to the kernel.org website so
that others can verify it there.

thanks,

greg k-h