apt/debian/default-sequoia.config, branch 2.9.24Debians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=2.9.242025-01-01T12:28:57ZExtend v3 subkey expiry to 2026, owing to OBS use2025-01-01T12:28:57ZJulian Andres Klodejulian.klode@canonical.com2025-01-01T12:17:00Zurn:sha1:3c4d0d25e1c35af16b66a4dee48fb3b0ed9d50a5
SUSE's Open Build Service is signing multiple repositories using
v3 signing keys.
debian: Add default policy to allow SHA-1 self-signatures until 20262024-12-22T22:52:05ZJulian Andres Klodejulian.klode@canonical.com2024-12-20T10:21:29Zurn:sha1:153653d449efe121487641303d43ac523b9b17fb
Many repositories still have SHA-1 self-signatures, and they are not
security relevant for APT repositories in the first place since we
do not use a web of trust model, but rather a set of trusted keyrings,
and the subkey can essentially be always considered trusted even if
it cannot be verified.