X2Go Bug report logs - #1030
Repository signing uses weak digest algorithm (SHA1)

Package: packages.x2go.org; Maintainer for packages.x2go.org is x2go-dev@lists.x2go.org;

Reported by: Christian Kreidl <debian@chk.cksf.de>

Date: Tue, 26 Apr 2016 12:20:02 UTC

Severity: normal

Done: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>

Bug is archived. No further changes may be made.

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to x2go-dev@lists.x2go.org, x2go-project@lists.x2go.org:
Bug#1030; Package packages.x2go.org. (Tue, 26 Apr 2016 12:20:02 GMT) (full text, mbox, link).

Acknowledgement sent to Christian Kreidl <debian@chk.cksf.de>:
New Bug report received and forwarded. Copy sent to x2go-project@lists.x2go.org. (Tue, 26 Apr 2016 12:20:02 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

Package: packages.x2go.org

Hi!

Repository signing with SHA1 is deprecated in testing:

http://packages.x2go.org/debian/dists/stretch/InRelease: Signature by key
972FD88FA0BAFB578D0476DFE1F958385BFE2B6E uses weak digest algorithm (SHA1)

Please update your configuration to use SHA256:
https://wiki.debian.org/SettingUpSignedAptRepositoryWithReprepro#Generating_GnuPG_keys

Thanks!

Information forwarded to x2go-dev@lists.x2go.org, x2go-project@lists.x2go.org:
Bug#1030; Package packages.x2go.org. (Fri, 08 Jul 2016 09:45:02 GMT) (full text, mbox, link).

Acknowledgement sent to Mike Gabriel <mike.gabriel@das-netzwerkteam.de>:
Extra info received and forwarded to list. Copy sent to x2go-project@lists.x2go.org. (Fri, 08 Jul 2016 09:45:02 GMT) (full text, mbox, link).

Message #10 received at 1030@bugs.x2go.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

Control: close -1

On  Di 26 Apr 2016 14:12:45 CEST, Christian Kreidl wrote:

> Package: packages.x2go.org
>
> Hi!
>
> Repository signing with SHA1 is deprecated in testing:
>
> http://packages.x2go.org/debian/dists/stretch/InRelease: Signature by key
> 972FD88FA0BAFB578D0476DFE1F958385BFE2B6E uses weak digest algorithm (SHA1)
>
> Please update your configuration to use SHA256:
> https://wiki.debian.org/SettingUpSignedAptRepositoryWithReprepro#Generating_GnuPG_keys
>
> Thanks!

Done. Actually, digest-algo is now SHA512.

Mike

-- 

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
mobile: +49 (1520) 1976 148
landline: +49 (4354) 8390 139

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

[Message part 2 (application/pgp-signature, inline)]

Marked Bug as done Request was from Mike Gabriel <mike.gabriel@das-netzwerkteam.de> to 1030-submit@bugs.x2go.org. (Fri, 08 Jul 2016 09:45:03 GMT) (full text, mbox, link).

Notification sent to Christian Kreidl <debian@chk.cksf.de>:
Bug acknowledged by developer. (Fri, 08 Jul 2016 09:45:03 GMT) (full text, mbox, link).

Bug archived. Request was from Debbugs Internal Request <owner@bugs.x2go.org> to internal_control@bugs.x2go.org. (Sat, 06 Aug 2016 05:24:01 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

X2Go Developers <owner@bugs.x2go.org>. Last modified: Tue Dec 3 17:11:09 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

X2Go Bug report logs - #1030 Repository signing uses weak digest algorithm (SHA1)

X2Go Bug report logs - #1030
Repository signing uses weak digest algorithm (SHA1)