Bug 40647

Summary: Add stronger hashes to apt indices
Product: Infrastructure Reporter: Dmitry V. Levin <ldv>
Component: girarAssignee: placeholder <placeholder>
Status: CLOSED FIXED QA Contact: Andrey Cherepanov <cas>
Severity: blocker    
Priority: P5 CC: aen, alexey.tourbin, at, boyarsh, glebfm, imz, ldv, mike, vt
Version: unspecified   
Hardware: all   
OS: Linux   
Bug Depends on: 40635, 40646, 40801    
Bug Blocks: 40561    

Description Dmitry V. Levin 2021-08-04 03:40:52 MSK
+++ This bug was initially created as a clone of Bug #40646 +++

Необходима поддержка в girar новых хешей для apt.
Это хеши, используемые в файлах base/release и pkglist.*.
Comment 1 Vitaly Chikunov 2021-08-22 01:12:55 MSK
Файл release для p10 подписан с использованием sha1.
Comment 2 Vitaly Chikunov 2021-08-22 01:45:25 MSK
Curious fact that signing key itself is self-signed with sha1.
Comment 3 Gleb F-Malinovskiy 2021-11-01 14:53:07 MSK
Fixed with 755ca630918c94be2a86adf79b0a2a7a3c61f053.