Sublime Forum

Debian Repo getting a warning

#1

I’m trying to use your Debian apt repo instructions, and I’m getting this warning:

Warning: https://download.sublimetext.com/apt/stable/InRelease: Policy will reject signature within a year, see --audit for details

When I use --audit flag as it suggests, I get

Warning: https://download.sublimetext.com/apt/stable/InRelease: Policy will reject signature within a year, see --audit for details
Audit: https://download.sublimetext.com/apt/stable/InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is:
   Signing key on 1EDDE2CDFC025D17F6DA9EC0ADAE6AD28A8F901A is not bound:
              primary key
     because: No binding signature at time 2025-05-13T05:32:15Z
     because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance
     because: SHA1 is not considered secure since 2026-02-01T00:00:00Z

This is on Debian/Testing, fully up to date.

0 Likes
#2

Same as https://github.com/sublimehq/sublime_text/issues/6679 right?

And is this (https://github.com/sublimehq/sublime_text/issues/6666) a fix for the same thing or a different apt change?

0 Likes
#3

So https://github.com/sublimehq/sublime_text/issues/6679 appears to be the same, yes.

https://github.com/sublimehq/sublime_text/issues/6666 is the instructions on https://www.sublimetext.com/docs/linux_repositories.html#apt which is what I used, that is giving this warning. So doesn’t seem to be the solution. I think it’s that the key is using SHA1, which isn’t considered secure, and so a policy is at a certain date it’ll disable validating it and cause errors.

0 Likes