Re: New requirements for APT repository signing

2024-03-04 Thread Holger Levsen
On Mon, Mar 04, 2024 at 07:47:08AM -, Sune Vuorela wrote: > In theory. I don't know if there are any statistics on 'popular' > 3rdparty repositories and their keys. I suspect src:extrepo-data is a good starting point for anyone interested in generating such statistics... -- cheers,

Re: New requirements for APT repository signing

2024-03-04 Thread Jeremy Bícha
tate their PPAs’ keys > (I vaguely recall searching for that and not finding it once). It is not possible to rotate your PPA keys yourself, but Canonical is handling it according to https://discourse.ubuntu.com/t/new-requirements-for-apt-repository-signing-in-24-04/42854 Thank you, Jeremy Bícha

Re: New requirements for APT repository signing

2024-03-04 Thread Thorsten Glaser
Sune Vuorela dixit: >In theory. I don't know if there are any statistics on 'popular' >3rdparty repositories and their keys. But assuming they're doing key Hm. My own private repo should be ok (3072R), but my Launchpad PPAs incidentally are not okay (1024D). Since this comes from Canonical,

Re: New requirements for APT repository signing

2024-03-03 Thread Sune Vuorela
On 2024-03-03, RL wrote: > It does - but also makes me wonder: is this going to affect Debian users > with 3rd party repositories when they upgrade to trixie? (or is that not > yet known?) In theory. I don't know if there are any statistics on 'popular' 3rdparty repositories and their keys. But

Re: New requirements for APT repository signing

2024-03-03 Thread RL
Johannes Schauer Marin Rodrigues writes: >> APT 2.7.13 just landed in unstable and with GnuPG 2.4.5 installed, >> requires repositories >> to be signed using one of >> >> - RSA keys of at least 2048 bit >> - Ed25519 >> - Ed448 >> >> Any other keys will cause warnings. These warnings will

Re: New requirements for APT repository signing

2024-03-01 Thread Julian Andres Klode
in driver to do the change *now*. > > > > If you operate third-party repositories using different key > > algorithms, now is your time to migrate before you get hit > > with an error. > > > > For the Ubuntu perspective, feel free to check out the discourse >

Re: New requirements for APT repository signing

2024-03-01 Thread Julian Andres Klode
On Fri, Mar 01, 2024 at 01:02:38AM +0100, Salvo Tomaselli wrote: > > Any other keys will cause warnings. These warnings will become > > errors in March as we harden it up for the Ubuntu 24.04 release > > Perhaps the announcement should have been sent earlier than 28th Feb then. Or > is there a

Re: New requirements for APT repository signing

2024-02-29 Thread Johannes Schauer Marin Rodrigues
Hi, Quoting Julian Andres Klode (2024-02-28 20:20:12) > APT 2.7.13 just landed in unstable and with GnuPG 2.4.5 installed, > or 2.4.4 with a backport from the 2.4 branch, requires repositories > to be signed using one of > > - RSA keys of at least 2048 bit > - Ed25519 > - Ed448 > > Any other

Re: New requirements for APT repository signing

2024-02-28 Thread Phil Wyett
now is your time to migrate before you get hit > with an error. > > For the Ubuntu perspective, feel free to check out the discourse > post: > > https://discourse.ubuntu.com/t/new-requirements-for-apt-repository-signing-in-24-04/42854 Hi, Could I be pointed to the public co