Repository navigation
Debian Trixie : Policy will reject signature within a year #149
Description
Hi
When using the Debian repository in Trixie, there is a warning message when doing apt update command :
W: http://hwraid.le-vert.net/debian/dists/bullseye/Release.gpg: Policy will reject signature within a year, see --audit for details
With --audit param, the message is more detailed :
Warning: http://hwraid.le-vert.net/debian/dists/bullseye/Release.gpg: Policy will reject signature within a year, see --audit for details
Audit: http://hwraid.le-vert.net/debian/dists/bullseye/Release.gpg: Sub-process /usr/bin/sqv returned an error code (1), error message is:
Signing key on 0073C11919A641464163F7116005210E23B3D3B4 is not bound:
No binding signature at time 2024-01-02T15:24:15Z
because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance
because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
So could you change the sign key to a more recent one ?
Thanks a lot
Dom
Activity
alaunay commentedon Feb 1, 2026
Unfortunately, the repo is now unusable:
Err:3 http://hwraid.le-vert.net/debian bookworm Release.gpg
Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 0073C11919A641464163F7116005210E23B3D3B4 is not bound: No binding signature at time 2024-01-02T15:24:17Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Warning: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. OpenPGP signature verification failed: http://hwraid.le-vert.net/debian bookworm Release: Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 0073C11919A641464163F7116005210E23B3D3B4 is not bound: No binding signature at time 2024-01-02T15:24:17Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
Warning: Failed to fetch http://hwraid.le-vert.net/debian/dists/bookworm/Release.gpg Sub-process /usr/bin/sqv returned an error code (1), error message is: Signing key on 0073C11919A641464163F7116005210E23B3D3B4 is not bound: No binding signature at time 2024-01-02T15:24:17Z because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
pimvanpelt commentedon Feb 22, 2026
Signing key does not work for Trixie
dominiquefournier commentedon Mar 11, 2026
The process to deploy the packages is now :
Should be updated on the main page of the Wiki...