Re: [PATCH 2/2] test: replace aging OpenPGP key used in the test suite

Subject: Re: [PATCH 2/2] test: replace aging OpenPGP key used in the test suite

Date: Mon, 19 Sep 2022 22:27:57 -0300

To: Justus Winter, notmuch@notmuchmail.org

Cc:

From: David Bremner

Justus Winter <justus@sequoia-pgp.org> writes:

> This replaces the old OpenPGPv4 key that is used in the test suite
> with a more modern OpenPGPv4 key.  All cryptographic artifacts in the
> test suite are updated accordingly.
>
> Having old cryptographic artifacts in the test suite presents a
> problem once the old algorithms are rejected by contemporary
> implementations.
>
> For reference, this is the old key.
>
>   sec   rsa1024 2011-02-05 [SC]
>         5AEAB11F5E33DCE875DDB75B6D92612D94E46381
>   uid           [ unknown] Notmuch Test Suite <test_suite@notmuchmail.org> (INSECURE!)
>   ssb   rsa1024 2011-02-05 [E]
>
> And this is the new key.  Note that is has the same shape, but uses
> Ed25519 and Cv25519 instead of 1024-bit RSA.
>
>   sec   ed25519 2022-09-07 [SC]
>         9A3AFE6C60065A148FD4B58A7E6ABE924645CC60
>   uid           [ultimate] Notmuch Test Suite (INSECURE!) <test_suite@notmuchmail.org>
>   ssb   cv25519 2022-09-07 [E]

The configure script still looks for gnupg-secret-key.asc, so that needs
to be updated as well.

I applied the first patch in the series to master

d
_______________________________________________
notmuch mailing list -- notmuch@notmuchmail.org
To unsubscribe send an email to notmuch-leave@notmuchmail.org

Thread: