Staffan: I’m not having this problem. My messages are being signed with SHA-256 (see attached image).
The command line is somewhat different than yours:
/usr/local/bin/gpg --no-verbose --batch --no-tty --compliance "openpgp"
--status-fd 2 --verify
"/var/folders/hg/2yv1dn712ps5hfqzbf9wxpd40000gn/T/MailMate_file.kQgsuf.sig" -
My GPG was installed as part of the GPG Tools suite (I’ve used the suite for
years). The GPG Keychain is v2.11, the GPG Suite is v2024.1b3 (they’re still
in beta for Sonoma/Sequoia). One of the reasons I’ve moved to MailMate is
Benny’s excellent support for GPG/OpenPGP.
I’m hoping that this may help. I don’t remember needing to set environment
variables, though - I just used the security tab in settings and enabled the
OpenPGP setting for Composer. I’m -guessing- that since I had the GPG Keychain
installed, MM was able to just use that directly.
Best Regards,
Scott Kuntzelman
On 14 Sep 2025, at 8:49, Staffan Persson via mailmate wrote:
> Hi,
>
> I am using MM with GPG and it works, but uses the outdate SHA-1 and not
> SHA-256. I have not had this problems when using command line GPG or with any
> other email client. Anyone knowing the source of the problem and how this
> could be fixed?
>
> The GPG was installed using homebrew and have the setting:
>
> defaults write com.freron.MailMate environmentVariables -array '{ enabled =
> :true; name = "MM_GPG"; value = "/opt/homebrew/bin/gpg"; }'
>
> The ‘OpenPGP: Signed’ says:
> /opt/homebrew/bin/gpg --no-verbose --batch --no-tty --compliance "openpgp"
> status-fd 2 --textmode --armor --local-user "<staffan.pers...@atsec.com>"
> detach-sign
>
> Best regards
> Staffan
> _______________________________________________
> mailmate mailing list
> Unsubscribe: https://lists.freron.com/listinfo/mailmate
signature.asc
Description: OpenPGP digital signature
_______________________________________________ mailmate mailing list Unsubscribe: https://lists.freron.com/listinfo/mailmate
