[MlMt] MM with GPG using an outdated hash (SHA-1)

[Scott Kuntzelman]

Staffan:

I’m not having this problem.  My messages are being signed with SHA-256 (see attached image).

The command line is somewhat different than yours:
/usr/local/bin/gpg --no-verbose --batch --no-tty --compliance "openpgp" --status-fd 2 --verify "/var/folders/hg/2yv1dn712ps5hfqzbf9wxpd40000gn/T/MailMate_file.kQgsuf.sig" -

My GPG was installed as part of the GPG Tools suite (I’ve  used the suite for years).  The GPG Keychain is v2.11, the GPG Suite is v2024.1b3 (they’re still in beta for Sonoma/Sequoia).  One of the reasons I’ve moved to MailMate is Benny’s excellent support for GPG/OpenPGP.

I’m hoping that this may help.  I don’t remember needing to set environment variables, though - I just used the security tab in settings and enabled the OpenPGP setting for Composer.  I’m -guessing- that since I had the GPG Keychain installed, MM was able to just use that directly.


![](cid:1B0DD9C5-31E0-4047-AE95-EDC73657A957 at kuntzelman.org "PastedImage.png")

Best Regards,
Scott Kuntzelman

On 14 Sep 2025, at 8:49, Staffan Persson via mailmate wrote:

> Hi,
>
> I am using MM with GPG and it works, but uses the outdate SHA-1 and not SHA-256. I have not had this problems when using command line GPG or with any other email client. Anyone knowing the source of the problem and how this could be fixed?
>
> The GPG was installed using homebrew and have the setting:
>
> defaults write com.freron.MailMate environmentVariables -array '{ enabled = :true;  name = "MM_GPG"; value = "/opt/homebrew/bin/gpg"; }'
>
> The ‘OpenPGP: Signed’ says:
> /opt/homebrew/bin/gpg --no-verbose --batch --no-tty --compliance "openpgp" status-fd 2 --textmode --armor --local-user "<staffan.persson at atsec.com>" detach-sign
>
> Best regards
> Staffan
> _______________________________________________
> mailmate mailing list
> Unsubscribe: https://lists.freron.com/listinfo/mailmate
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freron.com/pipermail/mailmate/attachments/20250915/1b1aebfa/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PastedImage.png
Type: image/png
Size: 51054 bytes
Desc: not available
URL: <http://lists.freron.com/pipermail/mailmate/attachments/20250915/1b1aebfa/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 516 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freron.com/pipermail/mailmate/attachments/20250915/1b1aebfa/attachment-0001.sig>