Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
Date:   Mon, 26 Aug 2019 06:33:28 +0200
From:   Greg KH <gregkh@linuxfoundation.org>
To:     Sasha Levin <sashal@kernel.org>
Cc:     =?iso-8859-1?Q?J=F6rg-Volker?= Peetz <jvpeetz@web.de>,
        stable@vger.kernel.org, linux-kernel@vger.kernel.org
Subject: Re: Linux 5.2.10
Message-ID: <20190826043328.GB26547@kroah.com>
References: <20190825144703.6518-1-sashal@kernel.org>
 <qju9bd$47qi$1@blaine.gmane.org>
 <20190825223537.GB5281@sasha-vm>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <20190825223537.GB5281@sasha-vm>
User-Agent: Mutt/1.12.1 (2019-06-15)
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk

On Sun, Aug 25, 2019 at 06:35:38PM -0400, Sasha Levin wrote:
> Thanks for looking into this!
> 
> On Sun, Aug 25, 2019 at 05:26:37PM +0200, J?rg-Volker Peetz wrote:
> > Where can I find your public gpg key and it's fingerprint?
> > It's not yet documented on https://www.kernel.org/category/signatures.html .
> 
> You're right, I'll send a patch to add my fingerprint as well.
> 
> > I'm asking because the "gpg --locate-keys" method does not work for me.
> 
> I can confirm this, and this is weird... I see a kernel.org UID on the
> key, and gpg seems to confirm that as well:
> 
> $ gpg --quick-add-uid DEA66FF797772CDC 'Sasha Levin <sashal@kernel.org>'
> gpg: Such a user ID already exists on this key!
> 
> Let me contact kernel.org support to see what I'm doing wrong...

Looks like everything is correct from my end:

$ git tag -v v5.2.10
object f7d5b3dc4792a5fe0a4d6b8106a8f3eb20c3c24c
type commit
tag v5.2.10
tagger Sasha Levin <sashal@kernel.org> 1566742490 -0400

This is the 5.2.10 stable release
gpg: Signature made Sun 25 Aug 2019 04:14:50 PM CEST
gpg:                using RSA key E27E5D8A3403A2EF66873BBCDEA66FF797772CDC
gpg: Good signature from "Sasha Levin <sashal@kernel.org>" [unknown]
gpg:                 aka "Sasha Levin <sasha.levin@oracle.com>" [undefined]
gpg:                 aka "Sasha Levin <alexander.levin@verizon.com>" [unknown]
gpg:                 aka "Sasha Levin <alexander.levin@microsoft.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: E27E 5D8A 3403 A2EF 6687  3BBC DEA6 6FF7 9777 2CDC

I'll go add yours and Ben's fingerprints to the kernel.org website so
that others can verify it there.

thanks,

greg k-h