Resolved Apt update warning weak algorithm (dsa1024)

[Kapnos]

Server operating system version

Ubuntu 24.04

Plesk version and microupdate number

18.0.61 Update #5

Hi,

when I run apt update on my Ubuntu 24.04 server I get the following warning:

W: https://autoinstall.plesk.com/pool/PSA_18.0.61_14662/dists/noble/InRelease: Signature by key 8BADC1A02FC9C07FB8C20EC0BD11A6AA914BDF7E uses weak algorithm (dsa1024)
W: https://autoinstall.plesk.com/PHP74_17/dists/noble/InRelease: Signature by key 8BADC1A02FC9C07FB8C20EC0BD11A6AA914BDF7E uses weak algorithm (dsa1024)
W: https://autoinstall.plesk.com/PHP81_17/dists/noble/InRelease: Signature by key 8BADC1A02FC9C07FB8C20EC0BD11A6AA914BDF7E uses weak algorithm (dsa1024)
W: https://autoinstall.plesk.com/PHP82_17/dists/noble/InRelease: Signature by key 8BADC1A02FC9C07FB8C20EC0BD11A6AA914BDF7E uses weak algorithm (dsa1024)
W: https://autoinstall.plesk.com/PHP83_17/dists/noble/InRelease: Signature by key 8BADC1A02FC9C07FB8C20EC0BD11A6AA914BDF7E uses weak algorithm (dsa1024)

Is this normal? Are you going to update the signature key with other algorithm?

 

[AYamshanov]

Hi @Kapnos, thank you for the feedback. Currently, the warning could be ignored, the key will be changed in one of the future releases.

 

[jmorthland]

This seems to still be an issue. Any updates on the issue?

Ubuntu 24.04
Plesk Obsidian 18.0.66

 

[Sebahat.hadzhi]

Thank you for the question, @jmorthland. This issue has not been addressed yet. The target for the fix release is in Plesk version 18.0.67. However, 18.0.68 is a more confident estimation. Thank you in advance for your understanding in the meantime.

 

[learning_curve]

This seems to still be an issue. Any updates on the issue?

Ubuntu 24.04
Plesk Obsidian 18.0.66

Issue - Plesk Updates - Expected in 18.0.65 - Now Overdue

The upgrade from 18.0.64 to 18.0.65 was another smooth / no issues upgrade. Thank you Plesk. However... The following two items still remain '...not yet fixed...' i.e. They don't appear in the 18.0.65 change-log and our own server(s) show no change. Details from other threads...

talk.plesk.com

 

[Sebahat.hadzhi]

Our team increased the length of the signing GPG key with yesterday's release, which should effective sort out the issue with the weak algorithm warning:

Updated the GPG key used to sign packages and repositories to a stronger one. The new key will be installed when applying updates using Plesk Installer.