starred/ntfy

Fork 0

mirror of https://github.com/binwiederhier/ntfy.git synced 2026-05-09 08:26:00 +02:00

[GH-ISSUE #1401] debian repro key is still using SHA1 #986

New issue

Closed

opened 2026-05-07 00:29:22 +02:00 by BreizhHardware · 5 comments

BreizhHardware commented

2026-05-07 00:29:22 +02:00

Owner

Originally created by @lduesing on GitHub (Jul 25, 2025).
Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/1401

🐞 Describe the bug
installing on debian trixie warns about rejecting SHA1 keys.

💻 Components impacted
debian repro https://archive.heckel.io/apt debian main key

💡 Screenshots and/or logs

Warning: https://archive.heckel.io/apt/dists/debian/InRelease: Policy will reject signature within a year, see --audit for details
Audit: https://archive.heckel.io/apt/dists/debian/InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is:
   Signing key on CF871F1E8399DAEF470832661D5B8EDFB2476E53 is not bound:
              No binding signature at time 2025-07-10T19:29:57Z
     because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance
     because: SHA1 is not considered secure since 2026-02-01T00:00:00Z

🔮 Additional context
Sorry, no.

Originally created by @lduesing on GitHub (Jul 25, 2025). Original GitHub issue: https://github.com/binwiederhier/ntfy/issues/1401 :lady_beetle: **Describe the bug** installing on debian trixie warns about rejecting SHA1 keys. :computer: **Components impacted** debian repro https://archive.heckel.io/apt debian main key :bulb: **Screenshots and/or logs** ``` Warning: https://archive.heckel.io/apt/dists/debian/InRelease: Policy will reject signature within a year, see --audit for details Audit: https://archive.heckel.io/apt/dists/debian/InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on CF871F1E8399DAEF470832661D5B8EDFB2476E53 is not bound: No binding signature at time 2025-07-10T19:29:57Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z ``` :crystal_ball: **Additional context** Sorry, no.

BreizhHardware

2026-05-07 00:29:22 +02:00

closed this issue
added the
🪲 bug
label

BreizhHardware commented

2026-05-07 00:29:22 +02:00

Author

Owner

@CrazyWolf13 commented on GitHub (Aug 25, 2025):

@binwiederhier this needs fixing, thanks for looking into it!

@CrazyWolf13 commented on GitHub (Aug 25, 2025): @binwiederhier this needs fixing, thanks for looking into it!

BreizhHardware commented

2026-05-07 00:29:23 +02:00

Author

Owner

@binwiederhier commented on GitHub (Aug 25, 2025):

Yeah I know. I think I'll just make a brand new repo elsewhere instead of trying to migrate or dual sign it. It'll be easier than that way.

Unless somebody knows how to do a seamless transition with aptly

@binwiederhier commented on GitHub (Aug 25, 2025): Yeah I know. I think I'll just make a brand new repo elsewhere instead of trying to migrate or dual sign it. It'll be easier than that way. Unless somebody knows how to do a seamless transition with aptly

BreizhHardware commented

2026-05-07 00:29:23 +02:00

Author

Owner

@binwiederhier commented on GitHub (Sep 23, 2025):

WIP: https://github.com/binwiederhier/ntfy-ansible/pull/5/files

@binwiederhier commented on GitHub (Sep 23, 2025): WIP: https://github.com/binwiederhier/ntfy-ansible/pull/5/files

BreizhHardware commented

2026-05-07 00:29:23 +02:00

Author

Owner

@binwiederhier commented on GitHub (Sep 23, 2025):

Can be tried out here: https://archive.ntfy.sh/apt/ (test server, will be replaced)

@binwiederhier commented on GitHub (Sep 23, 2025): Can be tried out here: https://archive.ntfy.sh/apt/ (test server, will be replaced)

BreizhHardware commented

2026-05-07 00:29:23 +02:00

Author

Owner

@binwiederhier commented on GitHub (Sep 23, 2025):

Dup of #1357

@binwiederhier commented on GitHub (Sep 23, 2025): Dup of #1357

BreizhHardware referenced this issue

2026-05-07 01:02:53 +02:00

[PR #1460] [MERGED] docs: fix healthcheck zombie processes #1611