Bug 40647 - Add stronger hashes to apt indices
Summary: Add stronger hashes to apt indices
Alias: None
Product: Infrastructure
Classification: Infrastructure
Component: girar (show other bugs)
Version: unspecified
Hardware: all Linux
: P5 blocker
Assignee: placeholder@altlinux.org
QA Contact: Andrey Cherepanov
Depends on: 40635 40646 40801
Blocks: 40561
  Show dependency tree
Reported: 2021-08-04 03:40 MSK by Dmitry V. Levin
Modified: 2021-11-01 14:53 MSK (History)
9 users (show)

See Also:


Note You need to log in before you can comment on or make changes to this bug.
Description Dmitry V. Levin 2021-08-04 03:40:52 MSK
+++ This bug was initially created as a clone of Bug #40646 +++

Необходима поддержка в girar новых хешей для apt.
Это хеши, используемые в файлах base/release и pkglist.*.
Comment 1 Vitaly Chikunov 2021-08-22 01:12:55 MSK
Файл release для p10 подписан с использованием sha1.
Comment 2 Vitaly Chikunov 2021-08-22 01:45:25 MSK
Curious fact that signing key itself is self-signed with sha1.
Comment 3 Gleb F-Malinovskiy 2021-11-01 14:53:07 MSK
Fixed with 755ca630918c94be2a86adf79b0a2a7a3c61f053.