Sublime Forum

Debian Repo getting a warning

#1

I’m trying to use your Debian apt repo instructions, and I’m getting this warning:

Warning: https://download.sublimetext.com/apt/stable/InRelease: Policy will reject signature within a year, see --audit for details

When I use --audit flag as it suggests, I get

Warning: https://download.sublimetext.com/apt/stable/InRelease: Policy will reject signature within a year, see --audit for details
Audit: https://download.sublimetext.com/apt/stable/InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is:
   Signing key on 1EDDE2CDFC025D17F6DA9EC0ADAE6AD28A8F901A is not bound:
              primary key
     because: No binding signature at time 2025-05-13T05:32:15Z
     because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance
     because: SHA1 is not considered secure since 2026-02-01T00:00:00Z

This is on Debian/Testing, fully up to date.

2 Likes
#2

Same as https://github.com/sublimehq/sublime_text/issues/6679 right?

And is this (https://github.com/sublimehq/sublime_text/issues/6666) a fix for the same thing or a different apt change?

0 Likes
#3

So https://github.com/sublimehq/sublime_text/issues/6679 appears to be the same, yes.

https://github.com/sublimehq/sublime_text/issues/6666 is the instructions on https://www.sublimetext.com/docs/linux_repositories.html#apt which is what I used, that is giving this warning. So doesn’t seem to be the solution. I think it’s that the key is using SHA1, which isn’t considered secure, and so a policy is at a certain date it’ll disable validating it and cause errors.

0 Likes
#4

No way to upvote issues, so: Bump.

1 Like
#5

Also seen after upgrading to Debian 13 (trixie) from Debian 12 (bookworm).

$ cat /etc/apt/sources.list.d/sublime-text.sources 
Types: deb
URIs: https://download.sublimetext.com/
Suites: apt/dev/
Signed-By: /etc/apt/keyrings/sublimehq-pub.asc
0 Likes