Trust path for release 5.6 is missing about tpm2-tools HOT 6 CLOSED

Awesome, thanks! 🎉

from tpm2-tools.

@dvzrv thanks for reporting the issue. I will add the fingerprints for all in the RELEASE.md

@ajaykish I don't see your gpg key tagged on our repo. Let me know what you call it and I can update the commit for fixing this issue.

from tpm2-tools.

@idesai thanks for looking into this.

Unfortunately, the change in #3361 was done without a signed commit and does therefore not solve this cryptographic trust path issue.

[..] could introduce it in a signed commit.

Would it be possible for you or @williamcroberts to certify @ajaykish's certificate (aka. "sign their key") and upload that to the relevant keysevers? Note that https://keys.openpgp.org strips third-party certifications, https://keyserver.ubuntu.com does not, and neither do the syncing keyservers such as https://pgpkeys.eu/

from tpm2-tools.

@dvzrv I signed the key. It should be available at https://keys.openpgp.org/vks/v1/by-fingerprint/6F72A30EEA41B9B548570AD20D0DB2B265493E29

from tpm2-tools.

@dvzrv I signed the key. It should be available at https://keys.openpgp.org/vks/v1/by-fingerprint/6F72A30EEA41B9B548570AD20D0DB2B265493E29

The third-party certification will unfortunately not be available on that keyserver (but would be on one of the other two):

Note that https://keys.openpgp.org/ strips third-party certifications,

from tpm2-tools.

@dvzrv I signed the key. It should be available at https://keys.openpgp.org/vks/v1/by-fingerprint/6F72A30EEA41B9B548570AD20D0DB2B265493E29

The third-party certification will unfortunately not be available on that keyserver (but would be on one of the other two):

Note that https://keys.openpgp.org/ strips third-party certifications,

Oops - it should now be up on keyserver.ubuntu.com

from tpm2-tools.