Jump to content

No longer able to update plastic on Ubuntu 16.04


naris

Recommended Posts

Ubuntu 16.04 will not accept the plastic repos, it complains that:

 

W: https://www.plasticscm.com/plasticrepo/plasticscm-common/Ubuntu_14.04/./Release.gpg: Signature by key FC547B45E1BB2D5BA32CFB6A9A847BB1704CBB6B uses weak digest algorithm (SHA1)
W: https://www.plasticscm.com/plasticrepo/plasticscm-latest/Ubuntu_14.04/./Release.gpg: Signature by key BEA0651E0EE3CBC4CF25092A3A8583CE515E508F uses weak digest algorithm (SHA1)
E: Failed to fetch No Hash entry in Release file /var/lib/apt/lists/partial/www.plasticscm.com_plasticrepo_plasticscm-common_Ubuntu%5f14.04_._Release which is considered strong enough for security purposes
E: Failed to fetch No Hash entry in Release file /var/lib/apt/lists/partial/www.plasticscm.com_plasticrepo_plasticscm-latest_Ubuntu%5f14.04_._Release which is considered strong enough for security purposes
E: Some index files failed to download. They have been ignored, or old ones used instead.
 

Update: I see now I already posted about this a while ago in installation and that I should just download the client zip file. I have done that and it works.

 

However, it would be much better if the ubuntu package could be updated to be signed with a valid key. Having an invalid installation package will most likely turn off most people evaluating plastic on linux and prevent them from considering it :(

Link to comment
Share on other sites

  • 8 months later...

I'm sorry we don't have full package support for Ubuntu. We'll try to make our best to support it soon.

Meanwhile remember you can upgrade your installation by just copying the new binaries into your client and server directories.

Link to comment
Share on other sites

  • 1 month later...
On 16.3.2017 at 5:46 PM, manu said:

I'm sorry we don't have full package support for Ubuntu. We'll try to make our best to support it soon.

Meanwhile remember you can upgrade your installation by just copying the new binaries into your client and server directories.

Is there any news or time-frame when plasticSCM will support ubuntu 16.04 new apt-get version?

Link to comment
Share on other sites

  • 2 weeks later...

Hello everyone!

I'm really happy to inform you that we've upgraded our repositories to be compatible with Ubuntu 16.04 or later! The repository signatures now use digest algorithm SHA-256. Everything should be back to normal now.

Regards,
Miguel

Link to comment
Share on other sites

It does not work for me, I get the following errors:

sudo apt-get update
Hit:1 http://ppa.launchpad.net/cginternals/ppa/ubuntu zesty InRelease
Get:2 http://security.ubuntu.com/ubuntu zesty-security InRelease [89,2 kB]
Hit:3 http://se.archive.ubuntu.com/ubuntu zesty InRelease
Ign:4 https://www.plasticscm.com/plasticrepo/plasticscm-common/Ubuntu_14.04 ./ InRelease
Hit:5 http://se.archive.ubuntu.com/ubuntu zesty-updates InRelease
Ign:6 https://www.plasticscm.com/plasticrepo/plasticscm-latest/Ubuntu_14.04 ./ InRelease
Hit:7 https://www.plasticscm.com/plasticrepo/plasticscm-common/Ubuntu_14.04 ./ Release
Hit:8 https://www.plasticscm.com/plasticrepo/plasticscm-latest/Ubuntu_14.04 ./ Release
Hit:9 http://se.archive.ubuntu.com/ubuntu zesty-backports InRelease
Get:10 https://www.plasticscm.com/plasticrepo/plasticscm-common/Ubuntu_14.04 ./ Release.gpg [481 B]
Ign:10 https://www.plasticscm.com/plasticrepo/plasticscm-common/Ubuntu_14.04 ./ Release.gpg
Fetched 89,7 kB in 2s (42,4 kB/s)
Reading package lists... Done
W: GPG error: https://www.plasticscm.com/plasticrepo/plasticscm-common/Ubuntu_14.04 ./ Release: The following signatures were invalid: FC547B45E1BB2D5BA32CFB6A9A847BB1704CBB6B
W: The repository 'https://www.plasticscm.com/plasticrepo/plasticscm-common/Ubuntu_14.04 ./ Release' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: No Hash entry in Release file /var/lib/apt/lists/www.plasticscm.com_plasticrepo_plasticscm-common_Ubuntu%5f14.04_._Release which is considered strong enough for security purposes

 

If I only add plasticscm-latest it works but plasticscm-common does not work at all.

Edit: I am using Xubuntu 17.04.

Link to comment
Share on other sites

I think I can see why "plasticscm-latest" worked for jonask and "common" did not. Neither work for me today because the keys had expired. Here's the an excerpt from running  apt-key list on my machine (*buntu 17.04)

pub   rsa2048 2015-01-12 [SC] [expired: 2017-03-22]
uid           [ expired] plasticscm-common OBS Project <plasticscm-common@obs2.codicefactory.com>
pub   rsa2048 2015-02-13 [SC] [expired: 2017-04-23]
uid           [ expired] plasticscm-latest OBS Project <plasticscm-latest@obs2.codicefactory.com>

Top one is a red herring.  Other two dates are the two plasticscm keys.  Note latest expiring later.

Fix with:

wget https://www.plasticscm.com/plasticrepo/plasticscm-common/Ubuntu_14.04/Release.key -O - | sudo apt-key add -

wget https://www.plasticscm.com/plasticrepo/plasticscm-common/Ubuntu_14.04/Release.key -O - | sudo apt-key add -

These update keys won't expire until June 2019.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...