From bcb1e6598a617d0cb778d332f69850bdb6b06735 Mon Sep 17 00:00:00 2001 From: Tim Lucas Date: Tue, 10 May 2016 10:34:49 +1000 Subject: [PATCH] Use SHA512 for Debian signing SHA1 is being removed, and is already broken on Ubuntu 16.04: https://wiki.debian.org/Teams/Apt/Sha1Removal --- scripts/utils/publish-debian-package.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/utils/publish-debian-package.sh b/scripts/utils/publish-debian-package.sh index 0590121299..83608ec4bc 100755 --- a/scripts/utils/publish-debian-package.sh +++ b/scripts/utils/publish-debian-package.sh @@ -57,7 +57,7 @@ GPG_PASSPHRASE=`openssl aes-256-cbc -k "$GPG_PASSPHRASE_PASSWORD" -in "$GPG_PASS bundle exec deb-s3 upload \ --preserve-versions \ --sign $GPG_SIGNING_KEY \ - --gpg-options "\-\-passphrase $GPG_PASSPHRASE" \ + --gpg-options "\-\-digest-algo SHA512 \-\-passphrase $GPG_PASSPHRASE" \ --bucket $DEB_S3_BUCKET \ --codename $CODENAME \ --component $COMPONENT \