Key consistency checks
This requirement has been approved by Jonathan McDowell <noodles@earth.li> 6 months, 1 week ago.
This process has been closed by noodles on 2019-06-25: no further modifications are possible.
Potential problems
- no UID found that fully satisfies requirements
Every Debian member needs a GPG key of sufficient strength. In addition, all keys should be certified so we can link them to a real-world identity.
The normal requirements are:
- the key should be type RSA and version 4 or greater
- the key should have the sign, certify and encrypt capabilities (subkeys are encouraged)
- the primary cryptographic material should be at least 4096 bits
- the UIDs should be signed by at least two existing Debian members (1 for DM applications)
- pseudonyms or anonymity are acceptable in certain circumstances
If the key does not meet these requirements, and you would struggle to create one which does, contact Front Desk.
This check will be approved manually by Front Desk as the application progresses.
Keycheck results
| OpenPGP fingerprint | 2861 2573 17C7 AEE4 F880 497E C386 0AC5 9F57 4E3A |
|---|---|
| Main key | ok (last updated: 2019-11-30 22:21 UTC) |
| UID Bastian Germann <bastian.germann, linutronix.de> |
ok, 0 non-DD sigs,
1 DD sigs:
|
| UID Bastian Germann <bage, linutronix.de> |
ok, 0 non-DD sigs,
1 DD sigs:
|
| UID Bastian Germann <b.germann, linutronix.de> |
ok, 0 non-DD sigs,
1 DD sigs:
|
| UID Bastian Germann <bastiangermann, fishpost.de> |
ok, 0 non-DD sigs,
0 DD sigs:
|
Log
| Date | Author | Action | Content | Public |
|---|---|---|---|---|
| 2019-06-04 19:46 | noodles | req_approve | This is a manual check, with some automated guidance. The system likes at least 2 DD signatures - for a DM application this can be relaxed, but we still recommend you make an effort to gain additional signatures. Also your primary UID has no valid DD signatures. Again, not a show-stopper but something we recommend you fix in time. | yes |
| 2019-06-04 19:41 | bage | - | What is causing "no UID found that fully satisfies requirements"? The only thing that I can think of are the subkeys having only 3072 bits. But the primary key has 4096 bits and "hokey lint" does not complain. | yes |