I need to import a GPG key which is currently available at https://www.tenable.com/downloads/api/v1/public/pages/nessus-agents/downloads/7000/download?i_agree_to_tenable_license_agreement=true (yes that’s the best URL I can figure out for it, the sha256sum is 0f407c2df84f925acd9822e26731f3a881b3b94…

its been signed with a SHA1 key [image] System-wide cryptographic policies in RHEL - Red Hat Customer Portal This article summarizes the rationale behind Red Hat Enterprise Linux cryptographic policies, and provides information on its default settings, and instructions on how it can be …

Thanks! A method of telling it’s a SHA1 key, which I’ve just worked out from Google searches, is that “digest algo 2” will appear in the output of $ gpg --list-packets keyfile [root@foo:production:~]$ gpg --list-packets tenable-2048.gpg | grep -i "digest algo 2" digest algo 2, begin of digest …

Information about crypto polices in RHEL 9 specifically Chapter 3. Using system-wide cryptographic policies Red Hat Enterprise Linux 9 | Red Hat Customer Portal From the description of LEGACY SHA-1 is allowed to be used as TLS hash, signature, and algorithm. CBC-mode ciphers are allowed to be use…

yeah that’s basically how to check - oddly enough i somehow remember the hash type numbers (at least the bad ones!) that response from tenable is pretty typical of their tech support these days unfortunately, i usually escalate it via a support ticket.

SHA-1 is not in DEFAULT but you can enable it without going to LEGACY (3.8 in RHEL doc that @mikew did point to): update-crypto-policies --set DEFAULT:SHA1 Although, LEGACY merely adds SHA-1 and CBC, so DEFAULT:SHA1 is almost the same.

Unable to import a gpg key on AlmaLinux 9

sej7278 June 10, 2022, 11:47am 2

its been signed with a SHA1 key