Debian Repository - Signature by key 2C…99 uses weak digest algorithm (SHA1)

[vsespb]

@ChrisChiappa from twitter reports:

---

@mtglacier Can the debian repos be updated? W: dl.mt-aws.com/debian/current…: Signature by key 2C…99 uses weak digest algorithm (SHA1)

---

not sure how to reproduce. Tried Debian 8 (adding key, apt-get update), and no warning.

[CChiappa]

I'm on Debian unstable. It looks like deprecation of SHA-1 is a somewhat new apt change:
https://juliank.wordpress.com/2016/03/14/dropping-sha-1-support-in-apt/

[vsespb]

Thanks! I need to think what to do

[johanneskloos]

The issue is still standing: The problem is the that InRelease file (at least) uses a SHA-1 hash by default, which modern APT does not like. I suppose you need to update your repository administration tools.

[johanneskloos]

See https://wiki.debian.org/Teams/Apt/Sha1Removal for dealing with this.