Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-9781

apt-get reports "The repository is insufficiently signed by key 199369E5404BD5FC7D2FE43BCBCB082A1BB943DB (weak digest)" on Debian Testing AMD64

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Major
    • Resolution: Fixed
    • 10.1.12
    • 10.0.25, 10.1.14, 10.2.0
    • Packaging, Platform Debian
    • None

    Description

      Hello @ll,
      I hope, I have chosen the right project, component, severity, and the like ... If not, feel free to change

      I tried to upgrade my system today as usual with "apt-get update && apt-get upgrade", and got the error message

      W: gpgv:/var/lib/apt/lists/ftp.hosteurope.de_mirror_mariadb.org_repo_10.1_debian_dists_jessie_InRelease: The repository is insufficiently signed by key 199369E5404BD5FC7D2FE43BCBCB082A1BB943DB (weak digest)
      

      While searching the web for this message, I stumbled upon https://juliank.wordpress.com/2016/03/15/clarifications-and-updates-on-apt-sha1/, where I found a link to wiki.debian.org/Teams/Apt/Sha1Removal. In this wiki page, it says

      Fixing broken repositories

      Repository owners should make sure their release files and Packages files contain SHA256 or SHA512 fields. If they have Sources files, those should contain Checksums-Sha256.

      . I would like to ask if it would be possible to fix this bug as fast as possible to be able to use MariaDB's own repository to upgrade to newer versions.
      Thanks in advance
      Thomas.

      Attachments

        Issue Links

          Activity

            People

              dbart Daniel Bartholomew
              thackert Thomas Hackert
              Votes:
              1 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.