Public bug reported:

Adding the apt key for `ppa:libreoffice/ppa` fails on newer systems
(specifically Ubuntu 22.04 Pro w/ `$ pro enable fips-updates`) that
removed support for the rsa1024 algorithm.

```
$ sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com --recv-keys 
83FBA1751378B444
Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead 
(see apt-key(8)).
Executing: /tmp/apt-key-gpghome.nICDD1j6kU/gpg.1.sh --keyserver 
hkp://keyserver.ubuntu.com --recv-keys 83FBA1751378B444
gpg: out of core handler ignored in FIPS mode
gpg: key 83FBA1751378B444: 1 bad signature
gpg: key 83FBA1751378B444: new key but contains no user ID - skipped
gpg: Total number processed: 1
gpg:           w/o user IDs: 1
...
```

I've inspected the key after adding it on a system that supports
rsa1024.

```
$ sudo apt-key list
...
/etc/apt/trusted.gpg
--------------------
pub   rsa1024 2010-12-29 [SC]
      36E8 1C92 67FD 1383 FCC4  4909 83FB A175 1378 B444
uid           [ unknown] Launchpad PPA for LibreOffice Packaging
...
```

Can the key be updated to use rsa4096?

** Affects: libreoffice (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to libreoffice in Ubuntu.
https://bugs.launchpad.net/bugs/2053281

Title:
  apt key uses deprecated rsa1024 algorithm

Status in libreoffice package in Ubuntu:
  New

Bug description:
  Adding the apt key for `ppa:libreoffice/ppa` fails on newer systems
  (specifically Ubuntu 22.04 Pro w/ `$ pro enable fips-updates`) that
  removed support for the rsa1024 algorithm.

  ```
  $ sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com --recv-keys 
83FBA1751378B444
  Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead 
(see apt-key(8)).
  Executing: /tmp/apt-key-gpghome.nICDD1j6kU/gpg.1.sh --keyserver 
hkp://keyserver.ubuntu.com --recv-keys 83FBA1751378B444
  gpg: out of core handler ignored in FIPS mode
  gpg: key 83FBA1751378B444: 1 bad signature
  gpg: key 83FBA1751378B444: new key but contains no user ID - skipped
  gpg: Total number processed: 1
  gpg:           w/o user IDs: 1
  ...
  ```

  I've inspected the key after adding it on a system that supports
  rsa1024.

  ```
  $ sudo apt-key list
  ...
  /etc/apt/trusted.gpg
  --------------------
  pub   rsa1024 2010-12-29 [SC]
        36E8 1C92 67FD 1383 FCC4  4909 83FB A175 1378 B444
  uid           [ unknown] Launchpad PPA for LibreOffice Packaging
  ...
  ```

  Can the key be updated to use rsa4096?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libreoffice/+bug/2053281/+subscriptions


-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to