[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #21694 [- Select a component]: Tor source tarball signed with sha1

#21694: Tor source tarball signed with sha1
----------------------------------+------------------------------------
 Reporter:  cypherpunks           |          Owner:  (none)
     Type:  defect                |         Status:  reopened
 Priority:  Medium                |      Milestone:  Tor: 0.3.1.x-final
Component:  - Select a component  |        Version:  Tor: 0.3.1.7
 Severity:  Normal                |     Resolution:
 Keywords:                        |  Actual Points:
Parent ID:                        |         Points:
 Reviewer:                        |        Sponsor:
----------------------------------+------------------------------------

Comment (by isis):

 Maybe try also setting (in `~/.gnupg/gpg.conf`):

 {{{
 personal-digest-preferences SHA512 SHA384 SHA256
 }}}

 The preferences which you had set when you created the key are burned into
 the key, but `gpg2 --export-options 'export-minimal' --export
 FE43009C4607B1FB | pgpdump | grep 'Hash alg'` says that it's SHA256, so I
 honestly don't know what is getting it to use SHA1.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21694#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs