Crystal: Installing crystal from Ubuntu 16.04 - weak key

Created on 4 May 2016  路  9Comments  路  Source: crystal-lang/crystal

Command: curl http://dist.crystal-lang.org/apt/setup.sh | sudo bash

std. out:
Get:19 http://dist.crystal-lang.org/apt crystal/main amd64 Packages [373 B]
Get:20 http://dist.crystal-lang.org/apt crystal/main i386 Packages [372 B]
Fetched 380 kB in 1s (310 kB/s)
Reading package lists... Done
W: http://dist.crystal-lang.org/apt/dists/crystal/InRelease: Signature by key 5995C83CD754BE448164192909617FD37CC06B54 uses weak digest algorithm (SHA1)

bug infrastructure

Most helpful comment

@crystal-lang bump! Only 1 week left before complete SHA1 removal.

All 9 comments

Is there any workaround available for this?

It's just a warning, it shouldn't break the install.

Oh, right! Thanks!

I think you can use https instead of http, which would solve this warning in a different way.

According to https://wiki.debian.org/Teams/Apt/Sha1Removal
"Please note that we intend to shut off SHA1 completely on January 1, 2017"

@crystal-lang bump! Only 1 week left before complete SHA1 removal.

It _seems_ we've just fixed this - if someone else can test & confirm, that'd be great :)

Jan 2nd and I am able to install Crystal in a fully upgraded Ubuntu 16.04.2 VM - closing this as fixed.

Please comment otherwise.

Was this page helpful?
0 / 5 - 0 ratings