Re: Keys using SHA-1 in the kernel keyring

Konstantin Ryabitsev <[email protected]> Mon, 24 Mar 2025 16:27:57 -0400

Newsgroups	org.kernel.linux.keys
Message-ID	<20250324-crouching-charcoal-agouti-d33ff5@lemur>

On Fri, Feb 07, 2025 at 06:09:40PM +0100, Uwe Kleine-König wrote:
> Fixing is as easy as:
> 
>        sq key export --cert DE0E66E32F1FDD0902666B96E63EDCA9329DD07E |
>                 sq cert lint --fix --cert-file=- |
>                 sq cert import

So, I was able to do it in the end using a series of --quick-set-primary-uid
commands. I've updated my own key, which I believe should make the linter
happy. I've also asked the gnupg list what is a better way to go about it, so
hopefully this will either result in someone pointing out the obvious solution
that I've overlooked, or implement one.

-K