| Issue |
179148
|
| Summary |
(packaging) apt.llvm.orgt/trixie - olicy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
|
| Labels |
new issue
|
| Assignees |
|
| Reporter |
grooverdan
|
Debian Trixie is no longer accepting sha1 on GPG key
```
root@47be441b5335:/# ./llvm.sh 21
+ tee -a /etc/apt/sources.list.d/http_apt_llvm_org_trixie_-trixie.sources
+ apt-get update
Hit:1 http://deb.debian.org/debian trixie InRelease
Hit:2 http://deb.debian.org/debian trixie-updates InRelease
Hit:3 http://deb.debian.org/debian-security trixie-security InRelease
Get:4 https://apt.llvm.org/trixie llvm-toolchain-trixie-21 InRelease [6837 B]
Err:4 https://apt.llvm.org/trixie llvm-toolchain-trixie-21 InRelease
Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 6084F3CF814B57C1CF12EFD515CF4D18AF4F7421 is not bound: No binding signature at time 2025-12-21T22:28:23Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Reading package lists... Done
W: OpenPGP signature verification failed: https://apt.llvm.org/trixie llvm-toolchain-trixie-21 InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 6084F3CF814B57C1CF12EFD515CF4D18AF4F7421 is not bound: No binding signature at time 2025-12-21T22:28:23Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
E: The repository 'http://apt.llvm.org/trixie llvm-toolchain-trixie-21 InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
```
![]()
_______________________________________________
llvm-bugs mailing list
[email protected]
https://lists.llvm.org/cgi-bin/mailman/listinfo/llvm-bugs
