Bug #82117 APT Key Signature
Submitted: 5 Jul 2016 15:55 Modified: 6 Jul 2016 12:10
Reporter: dark jasmines Email Updates:
Status: Closed Impact on me:
None 
Category:MySQL Package Repos Severity:S3 (Non-critical)
Version:16.04,0.7.3-1 OS:Ubuntu
Assigned to: Lars Tangvald CPU Architecture:Any

[5 Jul 2016 15:55] dark jasmines 
Description:
W: http://repo.mysql.com/apt/ubuntu/dists/xenial/InRelease: Signature by key A4A9406876FCBD3C456770C88C718D3B5072E1F5 uses weak digest algorithm (SHA1)

How to repeat:
add repository and do an "apt-get update"

Suggested fix:
upgrade the key
[6 Jul 2016 3:38] MySQL Verification Team 
Hello Mauro Gelsomini,

Thank you for the report.

Thanks,
Umesh
[6 Jul 2016 11:34] Lars Tangvald 
Hi,

This should be fixed now (changed to SHA512).
[6 Jul 2016 12:10] Lars Tangvald 
Posted by developer:
 
Just to note: This was a problem with the metadata on repo.mysql.com, not apt-config or the package files.