tag:gpgtools.tenderapp.com,2011-11-04:/discussions/problems/50455-public-key-processed-but-not-importedGPGTools: Discussion 2016-10-21T13:47:53Ztag:gpgtools.tenderapp.com,2011-11-04:Comment/410468032016-10-21T10:02:32Z2016-10-21T11:12:59ZKeys using MD5 are not imported (was: Public key - processed but not imported)<div><p>Ah, I see you don't allow emails to be posted - very sensible.
So it was the one at the bottom of this page: <a href="http://cypherspace.org/adam/">http://cypherspace.org/adam/</a></p></div>Brucetag:gpgtools.tenderapp.com,2011-11-04:Comment/410468032016-10-21T12:21:47Z2016-10-21T12:21:47ZKeys using MD5 are not imported (was: Public key - processed but not imported)<div><p>Hey Bruce,</p>
<p>welcome to the GPGTools community support platform. Sorry you
are having problems using GPG Suite.</p>
<p>When I do a search for <a href="mailto:adam@cypherspace.org">adam@cypherspace.org</a> I find three
keys of which two are revoked. The only valid key is from 1999.</p>
<p>The key in question uses MD5. Old keys which use MD5, which is
no longer considered secure, are also not imported. Those keys need
to be updated. Either a new stronger key can be created. Or the
self-signature can be improved. But that needs some expert
knowledge. So if you do not know how to do that, it may be easier
to create a new key.</p>
<p>All the best,<br>
steve</p></div>Stevetag:gpgtools.tenderapp.com,2011-11-04:Comment/410468032016-10-21T12:42:55Z2016-10-21T12:42:55ZKeys using MD5 are not imported (was: Public key - processed but not imported)<div><p>Ok thanks Steve - he should clearly have updated it by now, I'll
let him know.</p>
<p>As a mater of interest how can you tell it uses MD5? Is this
info on the keyserver - or do you need to run it through gpg on the
command line? It would be nice to see a message that alerts the
user to a key using an out of date crypto algorithm when an import
fails, but I guess this is a nice to have.</p>
<p>Thanks for your quick response.</p></div>Brucetag:gpgtools.tenderapp.com,2011-11-04:Comment/410468032016-10-21T13:07:41Z2016-10-21T13:07:41ZKeys using MD5 are not imported (was: Public key - processed but not imported)<div><p>The check is done in terminal.</p>
<ol>
<li>open terminal<br></li>
<li>gpg2 < path/to/key.asc<br>
There is a space between gpg2 < path/to/key.asc<br>
You can drag the key file into terminal, you don't have to manually
enter the path.</li>
</ol>
<p>GPG Keychain has no check for this and integrating one is not
trivial at all, so we decided to not take that route. But I
understand very well, that it would be sweet to have an informative
message explaining what's wrong and how to mitigate the
situation.</p>
<p>Kindly,<br>
steve</p></div>Stevetag:gpgtools.tenderapp.com,2011-11-04:Comment/410468032016-10-21T13:16:54Z2016-10-21T13:16:54ZKeys using MD5 are not imported (was: Public key - processed but not imported)<div><p>Awesome - good luck with Sierra btw.</p></div>Brucetag:gpgtools.tenderapp.com,2011-11-04:Comment/410468032016-10-21T13:47:52Z2016-10-21T13:47:52ZKeys using MD5 are not imported (was: Public key - processed but not imported)<div><p>Thanks.</p>
<p>I'm closing this discussion. Should you need further assistance
or have questions you can re-open this discussion here or open a
new one any time.</p>
<p>Best, steve</p></div>Steve