Re: Updated GPG key for sj (was: "Re: Your kernel.org PGP key has conflicting expiration dates")

[SJ Park <sj@kernel.org>]

On Wed, 28 Oct 2026 22:45:54 -0400 Konstantin Ryabitsev <mricon@kernel.org> wrote:

> On Wed, Oct 28, 2026 at 04:57:46PM -0700, SJ Park wrote:
> > Attching the updated key below.  Note that I use "SJ Park" as my name for kernel
> > development now, so modified your above command to use that.
> > 
> > Please let me know if I did anything wrong.
> 
> Looks good, but... while I have you! Could you please run this script to
> strengthen all the signatures on the keys you've signed in the past?
> 
>     https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git/plain/scripts/resign-modern-hash.py
> 
> The instructions are in the header. That should help improve the web of trust
> in the keyring.

Thank you for sharing this!  I ran the script, and seems no action is needed
from my side.

'''
pgpkeys$ git checkout origin/master
[...]
HEAD is now at 10e606b8 Restore expired keys removed in 2025 to keys/expired/
$ ./scripts/resign-modern-hash.py
Certifier: B84722821233BD43B8D0922B8BC68E994040912F
Keys dir:  /home/lkhack/pgpkeys/keys

Building analysis keyring... 649 keys.
Cross-checking local keyring... 1 matching key.

  [ OK ] 7967F76ABB41FC44  SHA512     Namhyung Kim <namhyung@kernel.org>
  [ OK ] FF18FCC1C43759F3  SHA256     Minchan Kim <minchan@kernel.org>
  [ OK ] 7E271B2ACD1D430D  SHA512     Puranjay Mohan <puranjay@kernel.org>
  [ OK ] 5A0312EB0C1DEAE3  SHA512     Harry Yoo <harry@kernel.org>

All your certifications in pgpkeys.git and your local keyring use modern hash algorithms.

This only covers your signatures on other people's keys. To check
your own key's self-signatures, run:
  scripts/rebind-modern-hash.py --fpr B84722821233BD43B8D0922B8BC68E994040912F
pgpkeys$ ./scripts/resign-modern-hash.py --signer B84722821233BD43B8D0922B8BC68E994040912F
Certifier: B84722821233BD43B8D0922B8BC68E994040912F
Keys dir:  /home/lkhack/pgpkeys/keys

Building analysis keyring... 649 keys.
Cross-checking local keyring... 1 matching key.

  [ OK ] 7967F76ABB41FC44  SHA512     Namhyung Kim <namhyung@kernel.org>
  [ OK ] FF18FCC1C43759F3  SHA256     Minchan Kim <minchan@kernel.org>
  [ OK ] 7E271B2ACD1D430D  SHA512     Puranjay Mohan <puranjay@kernel.org>
  [ OK ] 5A0312EB0C1DEAE3  SHA512     Harry Yoo <harry@kernel.org>

All your certifications in pgpkeys.git and your local keyring use modern hash algorithms.

This only covers your signatures on other people's keys. To check
your own key's self-signatures, run:
  scripts/rebind-modern-hash.py --fpr B84722821233BD43B8D0922B8BC68E994040912F
pgpkeys$ ./scripts/resign-modern-hash.py --verify
Certifier: B84722821233BD43B8D0922B8BC68E994040912F
Keys dir:  /home/lkhack/pgpkeys/keys

Building analysis keyring... 649 keys.
Cross-checking local keyring... 1 matching key.

  [ OK ] 7967F76ABB41FC44  SHA512     Namhyung Kim <namhyung@kernel.org>
  [ OK ] FF18FCC1C43759F3  SHA256     Minchan Kim <minchan@kernel.org>
  [ OK ] 7E271B2ACD1D430D  SHA512     Puranjay Mohan <puranjay@kernel.org>
  [ OK ] 5A0312EB0C1DEAE3  SHA512     Harry Yoo <harry@kernel.org>

All your certifications in pgpkeys.git and your local keyring use modern hash algorithms.

This only covers your signatures on other people's keys. To check
your own key's self-signatures, run:
  scripts/rebind-modern-hash.py --fpr B84722821233BD43B8D0922B8BC68E994040912F
'''

Please let me know if I missed something.


Thanks,
SJ

[...]