tag:gpgtools.tenderapp.com,2011-11-04:/discussions/problems/132356-gpg-suite-preferences-sha1-hash-algorithm-foundGPGTools: Discussion 2023-03-22T11:17:52Ztag:gpgtools.tenderapp.com,2011-11-04:Comment/581909322023-03-08T07:23:15Z2023-03-22T11:14:13ZGPG Mail: SHA1 hash algorithm found<div><p>When I use the signature for an E-Mail in MailMate it tells me: Note that the SHA1 hash algorithm has been found to have weaknesses</p>
<p><strong>Expected</strong><br>
No hints about weak hash algorithm.</p>
<p><strong>Additional info</strong></p>
<pre>
<code>macOS 13.2 22D49
GPG Suite 2023.1 3410 (5c363bfe16)
GPG Mail (enabled) 7.1 2180 (acd878a2ce) Decrypt Only Mode
GPG Keychain 1.12 1800 (a7b8825b15)
GPG Services 2.5 1200 (87637a835e)
MacGPG 2.2.41 1050 (61c98963b6)
GPG Suite Preferences 2.6.1 1230 (2960a7a76a)
Libmacgpg 1.5.1 990 (8e1ef2f1e5)
pinentry 1.1.1.1 100 (b7195e9d4c)</code>
</pre></div>comtag:gpgtools.tenderapp.com,2011-11-04:Comment/581909322023-03-08T09:45:08Z2023-03-08T09:45:08ZGPG Mail: SHA1 hash algorithm found<div><p>The issue has been resolved. I thought it was GPGTools, but it was MailMate - at least partially. If anyone else has this problem, I found the following solution to it:</p>
<p>In the file ~user.gnupg\gpg.conf add the following line:</p>
<pre>
<code>personal-digest-preferences SHA512 SHA384 SHA256 SHA224</code>
</pre>
<p>The tip comes from the MailMate developer himself. Many thanks to Benny Kjær Nielsen.</p></div>comtag:gpgtools.tenderapp.com,2011-11-04:Comment/581909322023-03-22T11:17:42Z2023-03-22T11:17:42ZGPG Mail: SHA1 hash algorithm found<div><p>Hi com,</p>
<p>thanks for taking the time to report this problem.</p>
<p>MailMate seems to be complaining about <code>personal-digest-preferences</code> in your <code>gpg.conf</code> file.</p>
<p>To change those preferences:</p>
<ol>
<li>open new finder window<br></li>
<li>press <code>shift cmd G</code> and paste <code>/.gnupg</code><br></li>
<li>open <code>gpg.conf</code> with TextEdit<br></li>
<li>remove <code>SHA1</code> from <code>personal-digest-preferences</code><br></li>
<li>press <code>cmd S</code> to save changes</li>
</ol>
<p>This entirely removes SHA1 usage.</p>
<p>Glad you already found the solution.</p>
<p>All the best,<br>
Steve</p></div>Steve