-
Notifications
You must be signed in to change notification settings - Fork 690
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Fix SHA-1 signatures on test_journalist_key
This key is nearly 10 years old now and had SHA-1 signatures. Use sq-keyring-linter to replace the signatures: $ gpg --no-default-keyring --keyring ./tmp.gpg --import test_journalist_key.* $ gpg --no-default-keyring --keyring ./tmp.gpg --armor --export-secret-key | sq-keyring-linter --fix | gpg --no-default-keyring --keyring ./tmp.gpg --import $ gpg --no-default-keyring --keyring ./tmp.gpg --armor --export CC40EF1228271441 > test_journalist_key.pub2 && gpg --no-default-keyring --keyring ./tmp.gpg --armor --export-secret-key CC40EF1228271441 > test_journalist_key.sec2 Then used `sq packet dump <file>` to verify the signatures were added and committed the updated keys. This is a necessary predecessor to Sequoia support, which has dropped SHA-1-signed keys b default. For cases where we do want to explicitly test the behavior of SHA-1 keys, we can pull and old verison out of Git history.
- Loading branch information
Showing
2 changed files
with
142 additions
and
89 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters