On Wed, Aug 24, 2022 at 12:31:29PM -0700, Adam Williamson wrote:
> so, from this we learn that the change would prevent PackageKit (and
> presumably other tools) from being able to read old Fedora signing
> keys; I'm not sure if that's a problem or not.

YES - virt-v2v, libguestfs etc relies on being able to inspect old RPM
databases.

Please do not remove or cripple SHA-1 support.

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming and virtualization blog: http://rwmj.wordpress.com
nbdkit - Flexible, fast NBD server with plugins
https://gitlab.com/nbdkit/nbdkit
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to