W: Signature by key uses weak digest algorithm

[jonchampagne]

Using Ubuntu 16.04.2, the following warning appears when running apt-get update

W: http://repo.factoriommo.org/dists/jessie/InRelease: Signature by key F38CADB4EE370FEBB715B6DCBADE6B59FEDBCF3A uses weak digest algorithm (SHA1)

It's not a big deal, the repo still works fine, but it's not guaranteed to work in the future, so this is probably something that should be fixed sooner rather than later.

[maikelwever]

I'm currently looking into having the repository on free hosted services, instead of my private GitLab server and buggy webhook. Then I will also tackle this.

Do you happen to know if we can improve the current key, or need to create an entirely new one, and if we need to create a new one, how can we migrate existing users to this new key?

[jonchampagne]

Personally I have no idea of the key could simply be improved or not. I just figured I'd bring the warning to your attention as something to eventually fix.

[psihius]

@maikelwever I suggest we have a talk and maybe use our fmmo server to host all the stuff, or have a small DO instance for that (thankfully those are cheap).

[maikelwever]

@psihius that won't necessarily solve this. I'd rather migrate to travisci+bintray so it can be managed by more than one person.