clone -1 -2
retitle -2 test gpg keys use weak hash algorithm, breaking with gpg-from-sq
reassign -1 gpg-from-sq
thanks

Hi,

 Am 14. April 2025 13:00:23 MESZ schrieb Holger Levsen <hol...@layer-acht.org>:
>On Mon, Apr 14, 2025 at 10:05:20AM +0200, Justus Winter wrote:
>> Looking purely at the key material I see:
>[...] 
>> It is not incompatible, just that gpg-from-sq rejects weak hash
>> algorithms.  

If you divert /usr/bin/gpg, IMHO you need to behave like gpg. This includes 
accepting what gpg accepts. 

Otherwise such surprises happen.

>> Therefore, an easy way to recover is to fix the certificates:
>[...]

Will try. (and keep pubring.gpg etc. since that is hardcoded in test setup 
copying)

And this would need the PITA to maintain that in Debian (binary files 
changing...) and upstreams old baseline can also be a problem. Need to submit 
and see ...

Will try to get it upstream, though for 25.8. Definitely not freeze material.

Regards 

René 

Reply via email to