[MXS-1394] Use new hash algorithm to sign Ubuntu/Debian repositories Created: 2017-09-06 Updated: 2020-08-25 Resolved: 2017-11-21 |
|
| Status: | Closed |
| Project: | MariaDB MaxScale |
| Component/s: | build |
| Affects Version/s: | None |
| Fix Version/s: | 2.1.10, 2.2.1 |
| Type: | Task | Priority: | Major |
| Reporter: | Kolbe Kegel (Inactive) | Assignee: | Timofey Turenko |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | None | ||
| Sprint: | 2017-44, 2017-45 |
| Description |
|
Ubuntu xenial and Debian stretch expect a stronger signing key for apt repositories: W: GPG error: http://downloads.mariadb.com/MaxScale/2.1/debian stretch Release: The following signatures were invalid: 13CFDE6DD9EE9784F41AF0F670E4618A8167EE24 See https://juliank.wordpress.com/2016/03/14/dropping-sha-1-support-in-apt/ for more information. This should be taken care of ASAP, for the next minor release(s) of MaxScale; please don't wait for the next major release. |
| Comments |
| Comment by Kolbe Kegel (Inactive) [ 2017-09-06 ] | ||||
|
Oops, this is not about using a new key, rather it's about using a newer hash algorithm to sign the repositories. I think this was enough to get reprepro to use the correct hashing algorithm:
If you're using something other than reprepro, you might need to do something else ... I tested the repository generated this way on Debian 7 (wheezy) as well as Debian 9 (stretch), so it works even with older OSs. |