Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Warning in Debian package repository: weak signature. #12

Open
squall77it opened this issue Aug 6, 2016 · 0 comments
Open

Warning in Debian package repository: weak signature. #12

squall77it opened this issue Aug 6, 2016 · 0 comments

Comments

@squall77it
Copy link

The APT software in Debian unstable/testing has now been updated to reject weak digest algorithms, most notably SHA1. The following warning is given, which will soon become an error, and prevent the package from being downloaded or installed:

http://dswd.github.com/Swine/repository/deb/dists/stable/InRelease: Signature by key C900543D4342460D81227C7C5D9944AB735F5C51 uses weak digest algorithm (SHA1)

The Debian wiki says:

"Repository owners should make sure their release files and Packages files contain SHA256 or SHA512 fields. If they have Sources files, those should contain Checksums-Sha256. ... [The above warning] means the GPG signature on the Release file was made with SHA1 as the hash (= digest) algorithm."

Please could you upgrade your release file so that the repository continues to work?

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant