dnbert / prm

PRM Allows you to quickly build package repositories, inspired by Jordan Sissels' FPM
MIT License
250 stars 33 forks source link

Weak key signing digest algorithm #65

Closed mschwager closed 8 years ago

mschwager commented 8 years ago

Similar to https://github.com/dnbert/prm/issues/59, apt is now also complaining about weak key signing algorithms. More specifically, SHA1.

SHA256 and SHA512 are now recommended: https://tracker.debian.org/news/755358

Here's the actual error I'm receiving:

http://pkg.repo.com/Ubuntu/dists/xenial/Release.gpg: Signature by key XXXKEYNAMEXXX uses weak digest algorithm (SHA1)