Re: Release signing key still uses SHA1

2024-05-08 Thread Daniel Kiper
On Fri, Apr 26, 2024 at 12:13:21AM +0200, Marek Marczykowski-Górecki wrote: > On Thu, Apr 25, 2024 at 11:27:53PM +0200, Daniel Kiper wrote: > > Hey, > > > > On Tue, Mar 12, 2024 at 05:13:24AM +0100, Marek Marczykowski-Górecki wrote: > > > Hi, > > > > > > The key used to sign release tarballs and gi

Re: Release signing key still uses SHA1

2024-04-25 Thread Marek Marczykowski-Górecki
On Thu, Apr 25, 2024 at 11:27:53PM +0200, Daniel Kiper wrote: > Hey, > > On Tue, Mar 12, 2024 at 05:13:24AM +0100, Marek Marczykowski-Górecki wrote: > > Hi, > > > > The key used to sign release tarballs and git tags still uses SHA1 for > > its self-signature. Is updated key somewhere already? > >

Re: Release signing key still uses SHA1

2024-04-25 Thread Daniel Kiper
Hey, On Tue, Mar 12, 2024 at 05:13:24AM +0100, Marek Marczykowski-Górecki wrote: > Hi, > > The key used to sign release tarballs and git tags still uses SHA1 for > its self-signature. Is updated key somewhere already? I have just updated it. You can find it at https://keys.openpgp.org/vks/v1/b

Release signing key still uses SHA1

2024-03-11 Thread Marek Marczykowski-Górecki
Hi, The key used to sign release tarballs and git tags still uses SHA1 for its self-signature. Is updated key somewhere already? SHA1 is starting to be rejected by some tools already, for example sequoia-sq: $ sq inspect grub-dkiper.pub grub-dkiper.pub: OpenPGP Certificate. Fin