Subject: Bug#1030 closed by Mike Gabriel <[email-masked]> (Re: [X2Go-Dev] Bug#1030: Repository signing uses weak digest algorithm (SHA1))

From: [email-masked] (X2Go Bug Tracking System)
Date: Fri, 08 Jul 2016 09:45:03 +0000

This is an automatic notification regarding your Bug report
which was filed against the packages.x2go.org package:

#1030: Repository signing uses weak digest algorithm (SHA1)

It has been closed by Mike Gabriel <[email-masked]>.

Their explanation is attached below along with your original report.
If this explanation is unsatisfactory and you have not received a
better one in a separate message then please contact Mike Gabriel <[email-masked]> by
replying to this email.

-- 
1030: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=1030
X2Go Bug Tracking System
Contact [email-masked] with problems

Subject: Re: [X2Go-Dev] Bug#1030: Repository signing uses weak digest algorithm (SHA1)
From: Mike Gabriel <[email-masked]>
To: Christian Kreidl <[email-masked]>, [email-masked]
Date: Fri, 08 Jul 2016 09:40:00 +0000

Control: close -1

On  Di 26 Apr 2016 14:12:45 CEST, Christian Kreidl wrote:

> Package: packages.x2go.org
>
> Hi!
>
> Repository signing with SHA1 is deprecated in testing:
>
> http://packages.x2go.org/debian/dists/stretch/InRelease: Signature by key
> 972FD88FA0BAFB578D0476DFE1F958385BFE2B6E uses weak digest algorithm (SHA1)
>
> Please update your configuration to use SHA256:
> https://wiki.debian.org/SettingUpSignedAptRepositoryWithReprepro#Generating_GnuPG_keys
>
> Thanks!

Done. Actually, digest-algo is now SHA512.

Mike

-- 

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
mobile: +49 (1520) 1976 148
landline: +49 (4354) 8390 139

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: [email-masked], http://das-netzwerkteam.de

Subject: Repository signing uses weak digest algorithm (SHA1)
From: Christian Kreidl <[email-masked]>
To: [email-masked]
Date: Tue, 26 Apr 2016 14:12:45 +0200

Package: packages.x2go.org

Hi!

Repository signing with SHA1 is deprecated in testing:

http://packages.x2go.org/debian/dists/stretch/InRelease: Signature by key
972FD88FA0BAFB578D0476DFE1F958385BFE2B6E uses weak digest algorithm (SHA1)

Please update your configuration to use SHA256:
https://wiki.debian.org/SettingUpSignedAptRepositoryWithReprepro#Generating_GnuPG_keys

Thanks!