From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 7D8D1C4345F for ; Thu, 25 Apr 2024 22:14:06 +0000 (UTC) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1s07LU-00026B-VN; Thu, 25 Apr 2024 18:13:37 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1s07LO-00025W-4L for grub-devel@gnu.org; Thu, 25 Apr 2024 18:13:31 -0400 Received: from fout6-smtp.messagingengine.com ([103.168.172.149]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1s07LM-0000M1-0o for grub-devel@gnu.org; Thu, 25 Apr 2024 18:13:29 -0400 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailfout.nyi.internal (Postfix) with ESMTP id 7A290138012F; Thu, 25 Apr 2024 18:13:25 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Thu, 25 Apr 2024 18:13:25 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= invisiblethingslab.com; h=cc:cc:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm3; t=1714083205; x=1714169605; bh=tYG4cKLBygDSlHQTYhaNhvLR603xmiHQhbq/3142vPU=; b= Wud7HjJ7P04Qc0Tb2IcrqdPHqvDlcE2yntvHx5KMSqGYsPqTDxC0HgtKvepmzsas lrSnjmhC9Vvr+h0Pfg/3lOzgviMEMa9hnlr6WQPs7yNZAf+KLpxOtPK4pZakNsyE Q9x+AUcbWNla5uxO/JoGDFG9zjtw1wD1huDXc+/RzdM0qhYyDHk3EJdy4xEX+31z NNLefX0513ymLYHzWUAf/G49YtR1p9/gvruFK165FJUemZ19s47AieHAQL7x8btv HiYyxYJghTLNxnaDq3vHE1ClXwaukDaQqGvl/pcS1aUdmdySZ613KaSrEV2KqqZ3 EMrZImxlR1Lu1e4yiF+ocQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s= fm3; t=1714083205; x=1714169605; bh=tYG4cKLBygDSlHQTYhaNhvLR603x miHQhbq/3142vPU=; b=dDDPBNua9OoFF7zbjomJqVxzdvjldGDnBmmYNvqn/nXW BzsxCepGb5Cka/anGNo3xcpM1NxcUJvy7ad57LOgUbS46QTDbMMwJtHCFKRfeq0N ZYNiZy3OTPudwObh7IU9295a2mBwVAxNrvv/wOWvXVAMJhy2A90h1s5m3scnC4fb 3YdvA4WrAAli2JsRF4ujxqqlMElSHGjm86Y5X0RAEA2XmGGBRjRKjscj2s7DeGpd N2QjyTh8ubKIeeb/+mnR5McVgT823zSXuvu52KplYhxrDuHZXqAI07Xo+dsWCoMq EcOJNjiWQ/ekXMfJUgmyuLv1XTlsD+o90R+8UkA7OA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvledrudelkedgtdehucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepfffhvfevuffkfhggtggujgesghdtreertddtjeenucfhrhhomhepofgrrhgv khcuofgrrhgtiiihkhhofihskhhiqdfikphrvggtkhhiuceomhgrrhhmrghrvghksehinh hvihhsihgslhgvthhhihhnghhslhgrsgdrtghomheqnecuggftrfgrthhtvghrnhepgfel leeihffhgeejiefftdehjeelfeevkeelleelieelffdvledvgeehudefieeknecuffhomh grihhnpehophgvnhhpghhprdhorhhgnecuvehluhhsthgvrhfuihiivgeptdenucfrrghr rghmpehmrghilhhfrhhomhepmhgrrhhmrghrvghksehinhhvihhsihgslhgvthhhihhngh hslhgrsgdrtghomh X-ME-Proxy: Feedback-ID: i1568416f:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Thu, 25 Apr 2024 18:13:24 -0400 (EDT) Date: Fri, 26 Apr 2024 00:13:21 +0200 From: Marek =?utf-8?Q?Marczykowski-G=C3=B3recki?= To: Daniel Kiper Cc: grub-devel@gnu.org Subject: Re: Release signing key still uses SHA1 Message-ID: References: <20240425212753.ebszpuo45fcbhekn@tomti.i.net-space.pl> MIME-Version: 1.0 In-Reply-To: <20240425212753.ebszpuo45fcbhekn@tomti.i.net-space.pl> Received-SPF: none client-ip=103.168.172.149; envelope-from=marmarek@invisiblethingslab.com; helo=fout6-smtp.messagingengine.com X-Spam_score_int: -26 X-Spam_score: -2.7 X-Spam_bar: -- X-Spam_report: (-2.7 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_PASS=-0.001, SPF_NONE=0.001, URIBL_SBL_A=0.1 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: The development of GNU GRUB Content-Type: multipart/mixed; boundary="===============0645101955913143777==" Errors-To: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org Sender: grub-devel-bounces+grub-devel=archiver.kernel.org@gnu.org --===============0645101955913143777== Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="4vbF37jSiVJVLpBt" Content-Disposition: inline --4vbF37jSiVJVLpBt Content-Type: text/plain; protected-headers=v1; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Date: Fri, 26 Apr 2024 00:13:21 +0200 From: Marek =?utf-8?Q?Marczykowski-G=C3=B3recki?= To: Daniel Kiper Cc: grub-devel@gnu.org Subject: Re: Release signing key still uses SHA1 On Thu, Apr 25, 2024 at 11:27:53PM +0200, Daniel Kiper wrote: > Hey, >=20 > On Tue, Mar 12, 2024 at 05:13:24AM +0100, Marek Marczykowski-G=C3=B3recki= wrote: > > Hi, > > > > The key used to sign release tarballs and git tags still uses SHA1 for > > its self-signature. Is updated key somewhere already? >=20 > I have just updated it. You can find it at > https://keys.openpgp.org/vks/v1/by-fingerprint/BE5C23209ACDDACEB20DB0A2= 8C8189F1988C2166 >=20 > Please drop me a line it works or not... Thanks, looks good now :) --=20 Best Regards, Marek Marczykowski-G=C3=B3recki Invisible Things Lab --4vbF37jSiVJVLpBt Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAmYq1YEACgkQ24/THMrX 1yyC0gf+LgwQWsy+rF5XQ2mAM5Ap1PiplSwUf5oJa7V5mY1A7nzDG3rOEVG3Ewfb afHWXIiTpFQ75t7LcbhihQk+kR1ISdeWk/lcXobgPZ/0nH81w8ITbH49lnmEo2/k PWrrohK+ZpoqQ4D/IM5Flf6gVK7IGyw376bfTQbDjKEZyyiinD1iIrjyXVhm40Yj TcW/8Fv0jM9G4D6tabXurPqyKwEFca167ui/s2uM10ptUe3/LbikuFgDyJ5TI5Ef JvSZjOGlXaZ3+r3nR2ugxCUhHQJ1LohiFldglvh1JhoOcdf8wgxUCtoO4Co79uwH RMUqrmQ4zDsbkSZSQ92c3x6HnsSyrA== =JXTO -----END PGP SIGNATURE----- --4vbF37jSiVJVLpBt-- --===============0645101955913143777== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KR3J1Yi1kZXZl bCBtYWlsaW5nIGxpc3QKR3J1Yi1kZXZlbEBnbnUub3JnCmh0dHBzOi8vbGlzdHMuZ251Lm9yZy9t YWlsbWFuL2xpc3RpbmZvL2dydWItZGV2ZWwK --===============0645101955913143777==--