claydoh_kmymoney2 - The repository is insufficiently

[marco07]

@Claydoh
FYI
The following message is produced in response to apt-get update in Xenial:

.....
Fetched 18.2 MB in 14s (1,269 kB/s)                                             
                      
Reading package lists... Done
W: 
gpgv:/var/lib/apt/lists/ppa.launchpad.net_claydoh_kmymoney2-
kde4_ubuntu_dists_xenial_InRelease: The repository is insufficiently signed by 
key FB24C90615749EE4DAD503EB10F09F7BD09DE175 (weak digest)
marco@Lenovo:~$

[Teunis]

Since 1 or 2 days I'm getting the same message for the Google Earth, video and Spotify ppa's.

So it looks like the system expects a newer type of cert.

[LinkBot]

When you have an error/warning messge the first thing is...



Bug 1558331 - message "The repository is insufficiently signed by key (weak digest)" is poorly worded: https://bugs.launchpad.net/ubuntu/+s...t/+bug/1558331

[claydoh]

Yeah I just got back online and saw this looks like this is just a warning atm,(ie not preventing anyone from downloading, etc), but it also does not seem immediately clear what needs to be done to update the key. Do we all need to make a new key and then have to re-upload or rebuild all the packages, or what?
I'll look but am busy as heck, being on vacation overseas

[Snowhog]

This is really old, but...

HOWTO prep for migration off of SHA-1 in OpenPGP

Look it over and let me know your thoughts.