Launchpad itself

How to fix Launchpad PPA which uses a key with weak algorithm when packaging recipe is used?

Asked by Archisman Panigrahi

I maintain several PPAs, and often use packaging recipes to build packages from source.

When I run `sudo apt update` in Ubuntu 24.04, I get warnings like
```
W: https://ppa.launchpadcontent.net/apandada1/blanket/ubuntu/dists/noble/InRelease: Signature by key 95ACDEBD8BFF99ABE0F26A49A507B2BBA7803E3B uses weak algorithm (rsa1024)
W: https://ppa.launchpadcontent.net/apandada1/foliate/ubuntu/dists/noble/InRelease: Signature by key 95ACDEBD8BFF99ABE0F26A49A507B2BBA7803E3B uses weak algorithm (rsa1024)
W: https://ppa.launchpadcontent.net/apandada1/marker/ubuntu/dists/noble/InRelease: Signature by key 95ACDEBD8BFF99ABE0F26A49A507B2BBA7803E3B uses weak algorithm (rsa1024)
W: https://ppa.launchpadcontent.net/apandada1/numbat/ubuntu/dists/noble/InRelease: Signature by key 95ACDEBD8BFF99ABE0F26A49A507B2BBA7803E3B uses weak algorithm (rsa1024)
W: https://ppa.launchpadcontent.net/apandada1/xournalpp-stable/ubuntu/dists/noble/InRelease: Signature by key 95ACDEBD8BFF99ABE0F26A49A507B2BBA7803E3B uses weak algorithm (rsa1024)
```
All these packages were generated by Launchpad recipes, and I did not sign them manually. Moreover, the key 95ACDEBD8BFF99ABE0F26A49A507B2BBA7803E3B is not even listed among my keys.

How to replace this key with one with a better encryption?

Question information

Language:
English Edit question
Status:
Solved
For:
Launchpad itself Edit question
Assignee:
No assignee Edit question
Solved by:
Clinton Fung
Solved:
Last query:
Last reply:
Revision history for this message
Best Clinton Fung (clinton-fung) said : 		#1

Repositories signed with 1024 bit keys will be warned from 24.04. see https://discourse.ubuntu.com/t/new-requirements-for-apt-repository-signing-in-24-04/42854

We are in the process of re-signing all affected PPAs, but to do that we also wish to avoid breaking workflows that haven't been able to update to the new keys. So Launchpad will dual-sign these PPAs.

Not much you can do right now, other than wait.

Revision history for this message
Archisman Panigrahi (apandada1) said : 		#2

Thanks Clinton Fung, that solved my question.