SCM-Manager installation problem: sha-1 not supported

SCM-Manager
1

I was trying to install scm-manager on Rocky Linux 9.6 and yum ended with this error:

warning: Signature not supported. Hash algorithm SHA1 not available.
...
Problem opening package scm-server-3.8.0.noarch.rpm.
...
Error: GPG check FAILED

this page, related to RHEL 9, explains why sha-1 is deprecated and provides workaround e.g. skipping gpg check via dnf --nogpgcheck .

UPDATE: the --nogpgcheck is not enough, now the error is:

Error: Transaction test error:
  package scm-server-0:3.8.0-.noarch does not verify: Header V4 RSA/SHA1 Signature, key ID 77d51fa4: BAD

Fortunately I could loosen the policy with update-crypto-policies --set DEFAULT:SHA1.

2

Hey kryszard,

Thanks for the report! We’re looking into it and will get back to you soon.