On Thu, Jun 26, 2014 at 12:28:04PM -0400, Daniel Kahn Gillmor wrote:
> I just noticed that Thom May's key appears twice in debian-keyring.gpg
> for some reason.  It's key 0xB5679467473F7EFA:
> 
> 0 dkg@alice:~$ pgpdump < /usr/share/keyrings/debian-keyring.gpg | grep Thom\ 
> May
>       User ID - Thom May <thom...@apache.org>
>       User ID - Thom May <t...@planetarytramp.net>
>       User ID - Thom May <t...@clearairturbulence.org>
>       User ID - Thom May <t...@debian.org>
>       User ID - Thom May <thom...@apache.org>
>       User ID - Thom May <t...@planetarytramp.net>
>       User ID - Thom May <t...@clearairturbulence.org>
>       User ID - Thom May <t...@canonical.com>
>       User ID - Thom May <t...@ubuntu.com>
> 0 dkg@alice:~$ 
> 
> doing gpg --import < /usr/share/keyrings/debian-keyring.gpg produces
> this warning message:
> 
> gpg: key 473F7EFA: duplicated user ID detected - merged
> 
> Presumably they can be collapsed together, but i don't know if this
> points to underlying problems with how we're managing the keyring, so
> i wanted to note it.

Easy enough to check:

[noodles@the ~/d-k/master-keyring]$ pgpdump < 
debian-keyring-gpg/0xB5679467473F7EFA | grep "Thom May"
        User ID - Thom May <thom...@apache.org>
        User ID - Thom May <t...@planetarytramp.net>
        User ID - Thom May <t...@clearairturbulence.org>
        User ID - Thom May <t...@debian.org>
        User ID - Thom May <thom...@apache.org>
        User ID - Thom May <t...@planetarytramp.net>
        User ID - Thom May <t...@clearairturbulence.org>
        User ID - Thom May <t...@canonical.com>
        User ID - Thom May <t...@ubuntu.com>

So it's all in the same keyfile rather than mismerging multiple key
files. What have we done with this key?

[noodles@the ~/d-k/master-keyring]$ git log
debian-keyring-gpg/0xB5679467473F7EFA
commit e23909e93e31755bc5c2b8b7627ec68e7a99f914
Author: Jonathan McDowell <nood...@earth.li>
Date:   Wed Mar 12 11:09:44 2008 +0000

    Initial import of current Debian keyring
    
      Obtained from rsync://keyring.debian.org::keyrings/keyrings/

So it hasn't been touched since initial import.

J.

-- 
Revd Jonathan McDowell, ULC | Let's not go there.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to