Bug#978630: [pkg-gnupg-maint] Bug#978630: gnupg: --check-sigs trusts weak digest alg if weak digest was trusted when importing key

On Tue, 2020-12-29 at 15:36 +0100, Werner Koch wrote: > gpg caches key signature verification results.  Use --no-sig-cache to > disable this cache. But only sometimes? As said in my follow-up for the key imported via `--recv-keys` the verification status of `--check-sigs` changes as expected

Bug#978630: [pkg-gnupg-maint] Bug#978630: gnupg: --check-sigs trusts weak digest alg if weak digest was trusted when importing key

Hi! gpg caches key signature verification results. Use --no-sig-cache to disable this cache. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. signature.asc Description: PGP signature