Command: curl http://dist.crystal-lang.org/apt/setup.sh | sudo bash
std. out:
Get:19 http://dist.crystal-lang.org/apt crystal/main amd64 Packages [373 B]
Get:20 http://dist.crystal-lang.org/apt crystal/main i386 Packages [372 B]
Fetched 380 kB in 1s (310 kB/s)
Reading package lists... Done
W: http://dist.crystal-lang.org/apt/dists/crystal/InRelease: Signature by key 5995C83CD754BE448164192909617FD37CC06B54 uses weak digest algorithm (SHA1)
For more context : https://wiki.debian.org/Teams/Apt/Sha1Removal
Is there any workaround available for this?
It's just a warning, it shouldn't break the install.
Oh, right! Thanks!
I think you can use https instead of http, which would solve this warning in a different way.
According to https://wiki.debian.org/Teams/Apt/Sha1Removal
"Please note that we intend to shut off SHA1 completely on January 1, 2017"
@crystal-lang bump! Only 1 week left before complete SHA1 removal.
It _seems_ we've just fixed this - if someone else can test & confirm, that'd be great :)
Jan 2nd and I am able to install Crystal in a fully upgraded Ubuntu 16.04.2 VM - closing this as fixed.
Please comment otherwise.
Most helpful comment
@crystal-lang bump! Only 1 week left before complete SHA1 removal.