Skip to content

Community repo GPG key invalid for RHEL 9 due to SHA1 deprecation

Summary

Reproducibility Platform OS OS Version Product Version
always AMD64 RHEL Plow (EL9.1) 13.0.2

Description

Unable to install GPG key to verify RPMs because the key is SHA1 hash is deprecated, viz: warning: Signature not supported. Hash algorithm SHA1 not available.

Steps to Reproduce

  1. wget https://www.bacula.org/downloads/Bacula-4096-Distribution-Verification-key.asc
  2. rpm --import Bacula-4096-Distribution-Verification-key.asc

Additional Information

Workaround: sed -i 's/gpgcheck=1/gpgcheck=0/g' /etc/yum.repos.d/Bacula-Community-Official.repo - but this is ... not a great idea (and may be prohibited by policy in some environments).

Thanks!