[pkg-gnupg-maint] Bug#931923: gnupg: should support sha2 fingerprints

Ansgar Burchardt ansgar at debian.org
Fri Jul 12 12:43:42 BST 2019


Package: gnupg
Version: 2.2.12-1
Severity: normal
Tags: upstream

>From man:gpg(1):

+---
| This format is deduced from the length of the string and its content
| or the 0x prefix.  Note, that only the 20 byte version fingerprint
| is available with gpgsm (i.e. the SHA-1 hash of the certificate).
+---

SHA-2 fingerprints should be supported for X.509 as well.  Web
browsers have shown those for quite a while now.

The same is true for fingerprints of OpenPGP keys, but I'm not sure if
there is any standard for those...

Ansgar



More information about the pkg-gnupg-maint mailing list