Bug 40647 - Add stronger hashes to apt indices
Summary: Add stronger hashes to apt indices
Status: CLOSED FIXED
Alias: None
Product: Infrastructure
Classification: Infrastructure
Component: girar (show other bugs)
Version: unspecified
Hardware: all Linux
: P5 blocker
Assignee: placeholder@altlinux.org
QA Contact: Andrey Cherepanov
URL:
Keywords:
Depends on: 40635 40646 40801
Blocks: 40561
  Show dependency tree
 
Reported: 2021-08-04 03:40 MSK by Dmitry V. Levin
Modified: 2021-11-01 14:53 MSK (History)
9 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Dmitry V. Levin 2021-08-04 03:40:52 MSK 
+++ This bug was initially created as a clone of Bug #40646 +++

Необходима поддержка в girar новых хешей для apt.
Это хеши, используемые в файлах base/release и pkglist.*.
Comment 1 Vitaly Chikunov 2021-08-22 01:12:55 MSK 
Файл release для p10 подписан с использованием sha1.
Comment 2 Vitaly Chikunov 2021-08-22 01:45:25 MSK 
Curious fact that signing key itself is self-signed with sha1.
Comment 3 Gleb F-Malinovskiy 2021-11-01 14:53:07 MSK 
Fixed with 755ca630918c94be2a86adf79b0a2a7a3c61f053.