diff options
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/gpg.texi | 17 | ||||
| -rw-r--r-- | doc/gpgv.texi | 8 |
2 files changed, 22 insertions, 3 deletions
diff --git a/doc/gpg.texi b/doc/gpg.texi index 93baf16e1..fd6508349 100644 --- a/doc/gpg.texi +++ b/doc/gpg.texi @@ -2610,9 +2610,20 @@ message was tampered with intentionally by an attacker. @item --allow-weak-digest-algos @opindex allow-weak-digest-algos -Signatures made with the broken MD5 algorithm are normally rejected -with an ``invalid digest algorithm'' message. This option allows the -verification of signatures made with such weak algorithms. +Signatures made with known-weak digest algorithms are normally +rejected with an ``invalid digest algorithm'' message. This option +allows the verification of signatures made with such weak algorithms. +MD5 is the only digest algorithm considered weak by default. See also +@option{--weak-digest} to reject other digest algorithms. + +@item --weak-digest @code{name} +@opindex weak-digest +Treat the specified digest algorithm as weak. Signatures made over +weak digests algorithms are normally rejected. This option can be +supplied multiple times if multiple algorithms should be considered +weak. See also @option{--allow-weak-digest-algos} to disable +rejection of weak digests. MD5 is always considered weak, and does +not need to be listed explicitly. @item --no-default-keyring diff --git a/doc/gpgv.texi b/doc/gpgv.texi index 0cb2360f8..7172a8cad 100644 --- a/doc/gpgv.texi +++ b/doc/gpgv.texi @@ -115,6 +115,14 @@ checks into warnings. @include opt-homedir.texi +@item --weak-digest @code{name} +@opindex weak-digest +Treat the specified digest algorithm as weak. Signatures made over +weak digests algorithms are normally rejected. This option can be +supplied multiple times if multiple algorithms should be considered +weak. MD5 is always considered weak, and does not need to be listed +explicitly. + @end table @mansect return value |