On čtvrtek 8. června 2023 21:37:09 CEST Ondřej Budai wrote: > RPM Sequoia's crypto policies can be configured, so you should be able to > re-enable SHA-1. However, this would be a global change, not only for > EL6... See > https://docs.rs/sequoia-policy-config/latest/sequoia_policy_config/#hash-functions > > Cheers, > Ondřej Thank you very much for the reference, Odřej! I'm not strongly against anything; but rather than weaker policy for everything I slightly prefer keeping the _stricter default policy_ with _disabled gpgcheck for EL6_ (we should phase epel-6 out entirely anyway since it's long time EOL, but we still keep it for the distro upgrade team(s)). This is up to the community to decide, let us know in our issue tracker if you are concerned. Pavel > On Thu, Jun 8, 2023 at 5:42 PM Pavel Raiskup <praiskup@xxxxxxxxxx> wrote: > > > Hello maintainers! > > > > Copr builders have been updated to Fedora 38 today (some old builders > > might still be running F37 ATM, but when they finish the task(s) they > > work on, they will be deleted). Our testsuite is passing just fine, so > > you _should_ be fine too :-). Please let us know if you have some > > troubles. > > > > There was one important change in Fedora 38 - RPM switched to the > > Sequoia crypto backend. It refuses SHA-1 in crypto; which basically > > disallows Mock to properly check EL6 GPG signatures. To allow further > > builds, we switched to gpgcheck=0 for all epel-6 chroots. If you know a > > better work-around, let me know. > > > > Pavel > > > > > > _______________________________________________ > > devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx > > To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx > > Fedora Code of Conduct: > > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > > List Archives: > > https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx > > Do not reply to spam, report it: > > https://pagure.io/fedora-infrastructure/new_issue > > > _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
