Bug#818405: apt: Google Chrome repository unusable because of weak digest

2016-03-27 Thread Ben Caradoc-Davies
On 28/03/16 11:14, Julian Andres Klode wrote: Don't be rude: Don't play hidden bts control message games. Julian, I apologise for inadvertently reopening this bug. That was not my intent (and I have now re-read the bts docs). I am quite happy with this bug being closed as a won't-fix and

Bug#818405: apt: Google Chrome repository unusable because of weak digest

2016-03-27 Thread Julian Andres Klode
Control: notfound -1 1.2.9 Control: close -1 Don't be rude: Don't play hidden bts control message games. On Mon, Mar 28, 2016 at 09:38:03AM +1300, Ben Caradoc-Davies wrote: > The Google repos still use a weak digest: > > W: http://dl.google.com/linux/chrome/deb/dists/stable/Release.gpg:

Bug#818405: apt: Google Chrome repository unusable because of weak digest

2016-03-27 Thread Ben Caradoc-Davies
The Google repos still use a weak digest: W: http://dl.google.com/linux/chrome/deb/dists/stable/Release.gpg: Signature by key 4CCA1EAF950CEE4AB83976DCA040830F7FAC5991 uses weak digest algorithm (SHA1) W: http://dl.google.com/linux/talkplugin/deb/dists/stable/Release.gpg: Signature by key

Bug#818405: apt: Google Chrome repository unusable because of weak digest

2016-03-19 Thread Ben Caradoc-Davies
Thanks for the update, Julian. Google are leading the deprecation of SHA1 and their continuing use of SHA1 digests in these repos is no doubt an oversight. This bug report will notify other Debian users that you have informed Google of the problem. Kind regards, -- Ben Caradoc-Davies

Bug#818405: apt: Google Chrome repository unusable because of weak digest

2016-03-19 Thread David Kalnischkies
On Sat, Mar 19, 2016 at 09:00:31PM +0300, Vladimir Stavrinov wrote: > On Wed, Mar 16, 2016 at 10:41:13PM +0100, Julian Andres Klode wrote: > > > I still went ahead with this and I think it's the right decision, I have > > not heard of any other repository provider affected yet --- the others are

Bug#818405: apt: Google Chrome repository unusable because of weak digest

2016-03-19 Thread Vladimir Stavrinov
On Wed, Mar 16, 2016 at 10:41:13PM +0100, Julian Andres Klode wrote: > I still went ahead with this and I think it's the right decision, I have > not heard of any other repository provider affected yet --- the others are Here they are: opera and acestream: W:

Bug#818405: apt: Google Chrome repository unusable because of weak digest

2016-03-19 Thread Ben Caradoc-Davies
Package: apt Version: 1.2.7 Severity: normal Dear Maintainer, apt 1.2.7 renders the Google Chrome and Hangouts plugin repositories unusable because of a weak digest. I assume that this behaviour is caused by the removal of support for SHA1 digests in apt 1.2.7: W: