# Fixing Debian Repository?

**URL:** <https://discuss.elastic.co/t/fixing-debian-repository/51097>\
**Category:** Elasticsearch\
**Created:** [May 26, 2016, 9:46pm UTC](https://discuss.elastic.co/t/fixing-debian-repository/51097 "2016-05-26T21:46:11Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![i5513](https://avatars.discourse-cdn.com/v4/letter/i/f19dbf/32.png) [@i5513](https://discuss.elastic.co/u/i5513)\
**Post date:** [May 26, 2016, 9:46pm UTC](https://discuss.elastic.co/t/fixing-debian-repository/51097/1 "2016-05-26T21:46:12Z")

</div>

Hello,

When on Debian sid , apt update:

W: [http://packages.elastic.co/elasticsearch/2.x/debian/dists/stable/Release.gpg:](http://packages.elastic.co/elasticsearch/2.x/debian/dists/stable/Release.gpg:) Signature by key 46095ACC8548582C1A2699A9D27D666CD88E42B4 uses weak digest algorithm (SHA1)

You can read about SHA1 removal at Debian Wiki, I will add your repository,  
[https://wiki.debian.org/Teams/Apt/Sha1Removal](https://wiki.debian.org/Teams/Apt/Sha1Removal)

Do you think it is fixable ?

Thank you !

---

<div class="post-metadata">

**Author:** ![majormoses](https://avatars.discourse-cdn.com/v4/letter/m/e19b73/32.png) [@majormoses](https://discuss.elastic.co/u/majormoses)\
**Post date:** [May 27, 2016, 12:30am UTC](https://discuss.elastic.co/t/fixing-debian-repository/51097/2 "2016-05-27T00:30:52Z")

</div>

This will affect users outside of sid, newer versions of ubuntu, I believe 15.10+

---

<div class="post-metadata">

**Author:** ![KervyN](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kervyn/32/10617_2.png) [@KervyN](https://discuss.elastic.co/u/KervyN)\
**Post date:** [June 29, 2016, 6:51am UTC](https://discuss.elastic.co/t/fixing-debian-repository/51097/3 "2016-06-29T06:51:25Z")

</div>

Ubuntu 16.04 also got this issue. Please fix the repository.

---

<div class="post-metadata">

**Author:** ![markdaku](https://avatars.discourse-cdn.com/v4/letter/m/f1d935/32.png) [@markdaku](https://discuss.elastic.co/u/markdaku)\
**Post date:** [July 9, 2016, 1:06pm UTC](https://discuss.elastic.co/t/fixing-debian-repository/51097/4 "2016-07-09T13:06:55Z")

</div>

Bump,

Please update this bug. It's a trivial fix to the repository. This will through security red flags all over the place.

---

<div class="post-metadata">

**Author:** ![nik9000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nik9000/32/44947_2.png) [@nik9000](https://discuss.elastic.co/u/nik9000)\
**Post date:** [July 9, 2016, 10:44pm UTC](https://discuss.elastic.co/t/fixing-debian-repository/51097/5 "2016-07-09T22:44:27Z")

</div>

My understanding is that it'll be fixed for 5.0 though I don't have the  
issue link handy.

---

<div class="post-metadata">

**Author:** ![jasontedor](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jasontedor/32/66992_2.png) [@jasontedor](https://discuss.elastic.co/u/jasontedor)\
**Post date:** [July 10, 2016, 3:26pm UTC](https://discuss.elastic.co/t/fixing-debian-repository/51097/6 "2016-07-10T15:26:16Z")

</div>

The public issue is [#17724](https://github.com/elastic/elasticsearch/issues/17724).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 10:36pm UTC](https://discuss.elastic.co/t/fixing-debian-repository/51097/7 "2017-07-05T22:36:47Z")

</div>