X2Go Bug report logs - #1030
Repository signing uses weak digest algorithm (SHA1)

Package: packages.x2go.org; Maintainer for packages.x2go.org is x2go-dev@lists.x2go.org;

Reported by: Christian Kreidl <debian@chk.cksf.de>

Date: Tue, 26 Apr 2016 12:20:02 UTC

Severity: normal

Done: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to x2go-dev@lists.x2go.org, x2go-project@lists.x2go.org:
Bug#1030; Package packages.x2go.org. (Tue, 26 Apr 2016 12:20:02 GMT) (full text, mbox, link).


Acknowledgement sent to Christian Kreidl <debian@chk.cksf.de>:
New Bug report received and forwarded. Copy sent to x2go-project@lists.x2go.org. (Tue, 26 Apr 2016 12:20:02 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

From: Christian Kreidl <debian@chk.cksf.de>
To: submit@bugs.x2go.org
Subject: Repository signing uses weak digest algorithm (SHA1)
Date: Tue, 26 Apr 2016 14:12:45 +0200
Package: packages.x2go.org

Hi!

Repository signing with SHA1 is deprecated in testing:

http://packages.x2go.org/debian/dists/stretch/InRelease: Signature by key
972FD88FA0BAFB578D0476DFE1F958385BFE2B6E uses weak digest algorithm (SHA1)

Please update your configuration to use SHA256:
https://wiki.debian.org/SettingUpSignedAptRepositoryWithReprepro#Generating_GnuPG_keys

Thanks!


Information forwarded to x2go-dev@lists.x2go.org, x2go-project@lists.x2go.org:
Bug#1030; Package packages.x2go.org. (Fri, 08 Jul 2016 09:45:02 GMT) (full text, mbox, link).


Acknowledgement sent to Mike Gabriel <mike.gabriel@das-netzwerkteam.de>:
Extra info received and forwarded to list. Copy sent to x2go-project@lists.x2go.org. (Fri, 08 Jul 2016 09:45:02 GMT) (full text, mbox, link).


Message #10 received at 1030@bugs.x2go.org (full text, mbox, reply):

From: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
To: Christian Kreidl <debian@chk.cksf.de>, 1030@bugs.x2go.org
Subject: Re: [X2Go-Dev] Bug#1030: Repository signing uses weak digest algorithm (SHA1)
Date: Fri, 08 Jul 2016 09:40:00 +0000
[Message part 1 (text/plain, inline)]
Control: close -1

On  Di 26 Apr 2016 14:12:45 CEST, Christian Kreidl wrote:

> Package: packages.x2go.org
>
> Hi!
>
> Repository signing with SHA1 is deprecated in testing:
>
> http://packages.x2go.org/debian/dists/stretch/InRelease: Signature by key
> 972FD88FA0BAFB578D0476DFE1F958385BFE2B6E uses weak digest algorithm (SHA1)
>
> Please update your configuration to use SHA256:
> https://wiki.debian.org/SettingUpSignedAptRepositoryWithReprepro#Generating_GnuPG_keys
>
> Thanks!

Done. Actually, digest-algo is now SHA512.

Mike

-- 

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
mobile: +49 (1520) 1976 148
landline: +49 (4354) 8390 139

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

[Message part 2 (application/pgp-signature, inline)]

Marked Bug as done Request was from Mike Gabriel <mike.gabriel@das-netzwerkteam.de> to 1030-submit@bugs.x2go.org. (Fri, 08 Jul 2016 09:45:03 GMT) (full text, mbox, link).


Notification sent to Christian Kreidl <debian@chk.cksf.de>:
Bug acknowledged by developer. (Fri, 08 Jul 2016 09:45:03 GMT) (full text, mbox, link).


Bug archived. Request was from Debbugs Internal Request <owner@bugs.x2go.org> to internal_control@bugs.x2go.org. (Sat, 06 Aug 2016 05:24:01 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


X2Go Developers <owner@bugs.x2go.org>. Last modified: Fri Dec 13 10:20:36 2019; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.