Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-23397

SHA1 warning for Debian Release file signature

XMLWordPrintableJSON

    • Type: Icon: Bug Bug
    • Resolution: Done
    • Priority: Icon: Major - P3 Major - P3
    • 3.3.11
    • Affects Version/s: None
    • Component/s: Packaging
    • None
    • Fully Compatible
    • ALL
    • Hide

      Follow instructions on https://docs.mongodb.org/master/tutorial/install-mongodb-on-debian/ Step 3, running apt-get update, produces the warning.

      Show
      Follow instructions on https://docs.mongodb.org/master/tutorial/install-mongodb-on-debian/ Step 3, running apt-get update , produces the warning.
    • Build 2016-08-26

      The use of SHA1 for Debian repository Release files is deprecated with plans for removal and began causing the following warning in APT 1.2.7:

      W: gpgv:/var/lib/apt/lists/repo.mongodb.org_apt_debian_dists_wheezy_mongodb-org_3.0_Release.gpg: The repository is insufficiently signed by key 492EAFE8CD016A07919F1D2B9ECBEC467F0CEB10 (weak digest)

      Although the issue only affects upcoming Debian and Ubuntu releases that are not officially supported, it would be great for users and developers on these systems if you would consider updating your repository to include stronger hashes.

      Thanks,
      Kevin

            Assignee:
            sam.kleinman Sam Kleinman (Inactive)
            Reporter:
            kevinoid Kevin Locke
            Votes:
            2 Vote for this issue
            Watchers:
            8 Start watching this issue

              Created:
              Updated:
              Resolved: