Re: [X2Go-Dev] Repository signing uses weak digest algorithm (SHA1)

On 08.07.2016 11:40 AM, Mike Gabriel wrote:

Control: close -1

On Di 26 Apr 2016 14:12:45 CEST, Christian Kreidl wrote:

...

Package: packages.x2go.org

Hi!

Repository signing with SHA1 is deprecated in testing:

http://packages.x2go.org/debian/dists/stretch/InRelease: Signature by key 972FD88FA0BAFB578D0476DFE1F958385BFE2B6E uses weak digest algorithm (SHA1)

Please update your configuration to use SHA256: https://wiki.debian.org/SettingUpSignedAptRepositoryWithReprepro#Generating_...

Thanks!

Done. Actually, digest-algo is now SHA512.

Are you sure that this is fixed? Don't we need to regenerate the keys or at least re-sign all (*.deb?) packages?

Mihai