Package: aptitude Followup-For: Bug #877948 Mr. Kalnischkies,
I really appreciate your helpful and detailed reply, as well as your good advice. I must say though that you should not have had to explain the SHA1 limitation - that's something aptitude should have done. I've always found the user feedback from aptitude quite lacking w.r.t errors (and reported it 4 years ago): https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=706183 How could I (as an apt team outsider) have known that the (poorly worded) "invalid" signature error was due to use of a substandard algorithm? I ran aptitude with debugging output enabled, and it gave no further information about this. The man page for aptitude also says nothing about the subjective criteria in play for validation. BTW, I have a couple new bug reports coming to hopefully mitigate the report herein being repeated by others. -- Package-specific info: Terminal: screen $DISPLAY is set. which aptitude: /usr/bin/aptitude aptitude version information: aptitude 0.6.11 compiled at Nov 8 2014 13:34:39 Compiler: g++ 4.9.1 Compiled against: apt version 4.12.0 NCurses version 5.9 libsigc++ version: 2.4.0 Gtk+ support disabled. Qt support disabled. Current library versions: NCurses version: ncurses 5.9.20140913 cwidget version: 0.5.17 Apt version: 4.12.0 aptitude linkage: linux-vdso.so.1 (0x00007ffd2e9f5000) /usr/lib/torsocks/libtorsocks.so (0x00007ffb63a80000) libapt-pkg.so.4.12 => /usr/lib/x86_64-linux-gnu/libapt-pkg.so.4.12 (0x00007ffb63710000) libncursesw.so.5 => /lib/x86_64-linux-gnu/libncursesw.so.5 (0x00007ffb634da000) libtinfo.so.5 => /lib/x86_64-linux-gnu/libtinfo.so.5 (0x00007ffb632b0000) libsigc-2.0.so.0 => /usr/lib/x86_64-linux-gnu/libsigc-2.0.so.0 (0x00007ffb630aa000) libcwidget.so.3 => /usr/lib/x86_64-linux-gnu/libcwidget.so.3 (0x00007ffb62d94000) libsqlite3.so.0 => /usr/lib/x86_64-linux-gnu/libsqlite3.so.0 (0x00007ffb62acb000) libboost_iostreams.so.1.55.0 => /usr/lib/x86_64-linux-gnu/libboost_iostreams.so.1.55.0 (0x00007ffb628b3000) libxapian.so.22 => /usr/lib/libxapian.so.22 (0x00007ffb624a2000) libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007ffb62285000) libstdc++.so.6 => /usr/lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007ffb61f7a000) libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007ffb61c79000) libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007ffb61a63000) libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007ffb616b8000) libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007ffb614b4000) libutil.so.1 => /lib/x86_64-linux-gnu/libutil.so.1 (0x00007ffb612b1000) libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007ffb61096000) libbz2.so.1.0 => /lib/x86_64-linux-gnu/libbz2.so.1.0 (0x00007ffb60e86000) liblzma.so.5 => /lib/x86_64-linux-gnu/liblzma.so.5 (0x00007ffb60c63000) librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007ffb60a5b000) libuuid.so.1 => /lib/x86_64-linux-gnu/libuuid.so.1 (0x00007ffb60856000) /lib64/ld-linux-x86-64.so.2 (0x00007ffb642e5000) -- System Information: Debian Release: 8.6 APT prefers oldstable-updates APT policy: (500, 'oldstable-updates'), (500, 'oldstable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages aptitude depends on: ii aptitude-common 0.6.11-1 ii libapt-pkg4.12 1.0.9.8.3 ii libboost-iostreams1.55.0 1.55.0+dfsg-3 ii libc6 2.19-18+deb8u6 ii libcwidget3 0.5.17-2 ii libgcc1 1:4.9.2-10 ii libncursesw5 5.9+20140913-1+b1 ii libsigc++-2.0-0c2a 2.4.0-1 ii libsqlite3-0 3.8.7.1-1+deb8u2 ii libstdc++6 4.9.2-10 ii libtinfo5 5.9+20140913-1+b1 ii libxapian22 1.2.19-1+deb8u1 Versions of packages aptitude recommends: ii aptitude-doc-en [aptitude-doc] 0.6.11-1 ii libparse-debianchangelog-perl 1.2.0-1.1 ii sensible-utils 0.0.9 Versions of packages aptitude suggests: ii apt-xapian-index 0.47 pn debtags <none> ii tasksel 3.31+deb8u1 -- no debconf information
