[SOLVED] Message when using Update Manager

dissposablehero · 02-13-2017, 04:03 PM

I've googled around and couldnt find this specific error but found similar ones but with solutions that seemed tailored to their specific error:

Code:

W:http://download.opensuse.org/repositories/home:/colomboem/xUbuntu_16.04/Release.gpg: 
Signature by key 1A2E38D61775C3963A039A87E3757B8E0D988D6E uses weak digest algorithm (SHA1)

Can anyone help?

Thanks

ondoho · 02-13-2017, 04:20 PM

the capital "W" suggests that this is a warning, not an error.

frankbell · 02-13-2017, 08:44 PM

This wikipedia article may shed some light on it. https://en.wikipedia.org/wiki/SHA-0

The short version is that SHA-1 is a relatively old hash format and is no longer considered highly secure.

dissposablehero · 02-14-2017, 03:06 PM

Hi frankbell,

Thanks for the info. Do you know what I should do to resolve it? Or should I just ignore the message and carry on?

Habitual · 02-14-2017, 03:56 PM

Is this the same system as your other thread?

dissposablehero · 02-14-2017, 04:05 PM

Quote:

Originally Posted by Habitual

Is this the same system as your other thread?

Ive no idea if the issues are related but assumed they werent.

hydrurga · 02-14-2017, 07:11 PM

It is the repository at fault here. They are signing the repo Release file with a key that is now considered inadequate.

There is nothing you can do, apart from ask the repo maintainer to migrate the Release file key to SHA256/SHA512, or you yourself find another PPA or repo serving the same package(s) which is adequately signed.

Habitual · 02-14-2017, 07:58 PM

Quote:

Originally Posted by dissposablehero

Ive no idea...

Not what I asked.
So, now that I'm yak shaving your toaster, here's my suggestion.

Re-install. I suggest defaults and Don't add "random" PPAs to a brand-new installs.
It's called Experience.

http://tinyurl.com/easylinuxtips

End Transmission.

Good Luck.