Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Encrypt ppa signing key with non-deprecated algorithm #1169

Open
jlepere-everlaw opened this issue May 9, 2024 · 2 comments
Open

Encrypt ppa signing key with non-deprecated algorithm #1169

jlepere-everlaw opened this issue May 9, 2024 · 2 comments
Assignees

Comments

@jlepere-everlaw
Copy link

Mentioning this here for lack of a better place (I can't seem to create a bug here).

Signing keys for strukturag PPAs are encrypted using rsa1024 (link), which is deprecated (link). This is preventing my organization from using these PPAs on FIPS compliant machines that have removed this cipher (specifically Ubuntu 22.04 pro w/ FIPS enabled - link).

Can your signing keys please be re-encrypted with something else, like rsa4096? My organization is specifically using libde265 and libheif, if that's helpful.

Thanks in advance! Please let me know if there's a more appropriate place for this issue!

@farindk
Copy link
Contributor

farindk commented May 9, 2024

I'm forwarding this to @fancycode, who is maintaining the PPA.

@fancycode
Copy link
Member

Looks like it's not possible to manually recreate the PPA signing key:
https://bugs.launchpad.net/launchpad/+bug/1331914

However, Ubuntu will update the keys of all PPAs over time:
https://discourse.ubuntu.com/t/new-requirements-for-apt-repository-signing-in-24-04/42854

Unfortunately I don't know if this already started or how long it will take to reach our libde265 / libheif PPAs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants