| Projekt: | Trisquel |
| Version: | 7.0 |
| Komponente: | Installer |
| Kategorie: | Fehlerbericht |
| Priorität: | normal |
| Zugewiesen: | nicht zugewiesen |
| Status: | active |
I tried to verify the iso image of trisquel 7 (http://cdimage.trisquel.info/trisquel-images/trisquel_7.0_amd64.iso) and i noticed that is using a weak key (https://trisquel.info/files/trisquel-archive-signkey.gpg) and SHA1 digest algorithm.
pub dsa1024 2007-01-14 [SC]
E6C27099CA21965B734AEA31B4EFB9F38D8AEBF1
uid [ unknown] Trisquel GNU/Linux (Trisquel GNU/Linux signing key) <name at domain>
sub elg2048 2007-01-14 [E]
---
gpg> showpref
[ unknown] (1). Trisquel GNU/Linux (Trisquel GNU/Linux signing key) <name at domain>
Cipher: AES256, AES192, AES, CAST5, 3DES
Digest: SHA1, SHA256, RIPEMD160
Compression: ZLIB, BZIP2, ZIP, Uncompressed
Features: MDC, Keyserver no-modify
