[Gpg4win-users-en] Importing Public Key With No User ID

[Kent Hurtig]

Hi Bernhard,

When I imported ECSI's public key via a command line and included the --allow-weak-digest-algos option, I successfully imported the key.  When I viewed the certificate details, the status was good.  I encrypted a file using ECSI's public key and emailed it to them.  ECSI successfully decrypted the file.  Thank you for all of your help.

Best regards,

Kent

-----Original Message-----
From: Bernhard Reiter [mailto:bernhard at intevation.de] 
Sent: Thursday, October 30, 2014 10:38 AM
To: gpg4win-users-en at wald.intevation.org
Cc: Kent Hurtig; Roger Scales
Subject: Re: [Gpg4win-users-en] Importing Public Key With No User ID

Hi Ken,

On Thursday 30 October 2014 at 15:47:45, Kent Hurtig wrote:
> I received the following message in the dos window, "Note:  signatures 
> using the MD5 algorithm are rejected".

see
https://gnupg.org/documentation/manuals/gnupg-devel/GPG-Esoteric-Options.html#GPG-Esoteric-Options
section "4.2.6 Doing things one usually doesn't want to do."

"--allow-weak-digest-algos
    Signatures made with the broken MD5 algorithm are normally rejected with an “invalid digest algorithm” message. This option allows the verification of signatures made with such weak algorithms. "

Best Regards,
Bernhard


-- 
www.intevation.de/~bernhard (CEO)    www.fsfe.org (Founding GA Member)
Intevation GmbH, Osnabrück, Germany; Amtsgericht Osnabrück, HRB 18998 Owned and run by Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner