4 ms·
In case anyone else is wondering, it looks like this will show if any SHA1 signatures are involved (brew or apt install pgpdump). gpg --export -a {keyname} |
by mkj 6y ago
In case anyone else is wondering, it looks like this will show if any SHA1 signatures are involved (brew or apt install pgpdump).
gpg --export -a {keyname} | pgpdump
Surprised it isn't in gpg itself - maybe that's why Debian developers hadn't noticed.
- aidenn0 6y agoI have no idea how to interpret that output. "SHA1" is listed last under "Hashed Sub: preferred hash algorithms(sub 21)(5 bytes)" but I have no clue what that means. I created the key with a recent gpg using default settings this year.
- upofadown 6y agoThat's your preference for what sort of hash you would like others to use when sending you a signed message. It is in order from most preferred to least preferred so SHA1 is last. Look for the "Hash alg" of the signature packets for your signing key and encryption subkey. Mine looks like this for both: Hash alg - SHA256(hash 8)