[MlMt] MM with GPG using an outdated hash (SHA-1)

mat beta at admilon.net
Fri Sep 19 15:17:20 EDT 2025


Hi,

About SHA-1 had been just a thread:
: [MlMt] Note that the SHA1 hash algorithm has been found to have weaknesses
What works for me, was recreating all subways and then in gpg.conf:
gig.conf:

no-emit-version
keyid-format 0xlong
with-fingerprint
list-options show-uid-validity
verify-options show-uid-validity
keyserver-options no-honor-keyserver-url
auto-key-retrieve
personal-cipher-preferences AES256 AES192 AES
personal-digest-preferences SHA512 SHA384 SHA256
personal-compress-preferences ZLIB BZIP2 ZIP Uncompressed
default-new-key-algo rsa4096
cert-digest-algo SHA512
digest-algo SHA512
disable-cipher-algo 3DES
default-key yourdefaultkey
agent-program /usr/local/gnupg-2.4/bin/gpg-agent or where-ever your agent lives.

Cheers
Matthias


On 14 Sep 2025, at 13:49, Staffan Persson via mailmate wrote:

> Hi,
>
> I am using MM with GPG and it works, but uses the outdate SHA-1 and not SHA-256. I have not had this problems when using command line GPG or with any other email client. Anyone knowing the source of the problem and how this could be fixed?
>
> The GPG was installed using homebrew and have the setting:
>
> defaults write com.freron.MailMate environmentVariables -array '{ enabled = :true;  name = "MM_GPG"; value = "/opt/homebrew/bin/gpg"; }'
>
> The ‘OpenPGP: Signed’ says:
> /opt/homebrew/bin/gpg --no-verbose --batch --no-tty --compliance "openpgp" status-fd 2 --textmode --armor --local-user "<staffan.persson at atsec.com>" detach-sign
>
> Best regards
> Staffan
> _______________________________________________
> mailmate mailing list
> Unsubscribe: https://lists.freron.com/listinfo/mailmate
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freron.com/pipermail/mailmate/attachments/20250919/94c07040/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 512 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freron.com/pipermail/mailmate/attachments/20250919/94c07040/attachment.sig>


More information about the mailmate mailing list