diff options
| author | Werner Koch <[email protected]> | 2021-05-12 06:55:51 +0000 |
|---|---|---|
| committer | Werner Koch <[email protected]> | 2021-05-12 06:55:51 +0000 |
| commit | 310b064f5271fe8566ebc996702ea1422875f425 (patch) | |
| tree | f3620ae346eea54806d5428bafb3630de1fa90be /agent/gpg-agent.c | |
| parent | A few minor code cleanups and typo fixes. (diff) | |
| download | gnupg-310b064f5271fe8566ebc996702ea1422875f425.tar.gz gnupg-310b064f5271fe8566ebc996702ea1422875f425.zip | |
agent: Use SHA-256 for SSH fingerprint by default
* agent/gpg-agent.c (parse_rereadable_options): Change default ssh
fingerprint digest.
(main): Ditto.
--
Co-authored-by: Jakub Jelen <[email protected]>
GnuPG-bug-id: 5434
Signed-off-by: Werner Koch <[email protected]>
Diffstat (limited to 'agent/gpg-agent.c')
| -rw-r--r-- | agent/gpg-agent.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/agent/gpg-agent.c b/agent/gpg-agent.c index 1285db995..7e46f98f7 100644 --- a/agent/gpg-agent.c +++ b/agent/gpg-agent.c @@ -869,7 +869,7 @@ parse_rereadable_options (gpgrt_argparse_t *pargs, int reread) memset (opt.disable_daemon, 0, sizeof opt.disable_daemon); disable_check_own_socket = 0; /* Note: When changing the next line, change also gpgconf_list. */ - opt.ssh_fingerprint_digest = GCRY_MD_MD5; + opt.ssh_fingerprint_digest = GCRY_MD_SHA256; opt.s2k_count = 0; set_s2k_calibration_time (0); /* Set to default. */ return 1; @@ -1436,7 +1436,7 @@ main (int argc, char **argv) es_printf ("max-passphrase-days:%lu:%d:\n", GC_OPT_FLAG_DEFAULT, MAX_PASSPHRASE_DAYS); es_printf ("ssh-fingerprint-digest:%lu:\"%s:\n", - GC_OPT_FLAG_DEFAULT, "md5"); + GC_OPT_FLAG_DEFAULT, "sha256"); agent_exit (0); } |