Community repo GPG key invalid for RHEL 9 due to SHA1 deprecation
Summary
Reproducibility | Platform | OS | OS Version | Product Version |
---|---|---|---|---|
always | AMD64 | RHEL | Plow (EL9.1) | 13.0.2 |
Description
Unable to install GPG key to verify RPMs because the key is SHA1 hash is deprecated, viz: warning: Signature not supported. Hash algorithm SHA1 not available.
Steps to Reproduce
wget https://www.bacula.org/downloads/Bacula-4096-Distribution-Verification-key.asc
rpm --import Bacula-4096-Distribution-Verification-key.asc
Additional Information
Workaround: sed -i 's/gpgcheck=1/gpgcheck=0/g' /etc/yum.repos.d/Bacula-Community-Official.repo
- but this is ... not a great idea (and may be prohibited by policy in some environments).
Thanks!