[ubuntu-za] Weak digest algorithm

[Wesley Werner]

Hi Jan

It is only a warning to remind you that the repository at 01.org uses an
inferior key. Ubuntu uses SHA256 for their repos.

This is out of your control, as the responsibilty lies with 01.org to sign
with better keys.

you could:

1) check if that repo provides a mirror signed with sha256 keys, and switch
to that mirror instead
2) remove the repo from your sources if you don't want it anymore. Any
packages you installed from the repo will stay on your pc but you won't get
their updates.
3) keep using it as is at your discretion

01.org seems to be intel open source related, graphics drivers my best
guess.


On 25 Jul 2017 11:38, "Jan" <jan at verslank.net> wrote:

Good day all,

Is there any hope for this problem? The following is the final output when
I run "sudo apt update" on my Ubuntu 16.04 Unity 64-bit desktop system
after some recent updates:

*W: https://download.01.org/gfx/ubuntu/16.04/main/dists/xenial/InRelease
<https://download.01.org/gfx/ubuntu/16.04/main/dists/xenial/InRelease>:
Signature by key 09D6EF97BFB38E916EF060E756A3DEF863961D39 uses weak digest
algorithm (SHA1)*

I have Googled around and the closest that I get is this post which does
not seem to apply:

https://askubuntu.com/questions/760796/how-to-fix-apt-signature-by-key-uses-
weak-digest-algorithm-sha1

When I revert back via Timeshift, the problem goes away temporarily, until
the system installs updates then it's back to square 1.

Everything seems to be running normally, so do I just live with it until it
sorts itself out or is there a better way?

Kind regards,

Jan



--
ubuntu-za mailing list
ubuntu-za at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-za
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-za/attachments/20170726/3eb0164a/attachment.html>