Unable to verify file integrity of which source tarball

[Luke]

Hello,
It is currently not possible to verify file integrity of the "which"
packages hosted on gnu.org (https://ftp.gnu.org/gnu/which/).

gpg --keyserver keyserver.ubuntu.com --recv-keys
6FD2C61D624ACAD5                                                          
gpg: Total number processed: 1
gpg:     skipped PGP-2 keys: 1

Skipped due to weak digest algo:

https://www.gnupg.org/faq/weak-digest-algos.html


Please update your GPG signing key an re-sign so that those of us
working downstream can verify the file integrity during compile time for
our packages.


Thank you,
Luke
Parabola GNU/Linux-libre Packager

signature.asc
Description: OpenPGP digital signature