Zabbix agent rpm package signature and RHEL 9

[svb]

Hi,

when installing Zabbix agent on RHEL 9 system, error is displayed regarding rpm package signature:

Zabbix 6.2 RHEL 9 x86_64 12 kB/s | 1.7 kB 00:00
Importing GPG key 0xA14FE591:
Userid : "Zabbix LLC <[email protected]>"
Fingerprint: A184 8F53 52D0 22B9 471D 83D0 082A B56B A14F E591
From : <URL removed>
warning: Signature not supported. Hash algorithm SHA1 not available.
Key import failed (code 2). Failing package is: zabbix-agent2-6.2.4-release1.el9.x86_64

Red Hat documentation [1] states that SHA1 has been deprecated in RHEL 9. The document also shows a workaround for this problem.

If workaround is not enough, then Zabbix should sign packages with some other, modern algorithm?

[1] https://www.redhat.com/en/blog/rhel-...trusted-rhel-9

--
svb

[tim.mooney]

Good info. If you would be willing to take an extra step, please consider reporting this to via the free bug tracker at https://support.zabbix.com/

This is the kind of thing the developer's should definitely act upon.

[svb]

Good info. If you would be willing to take an extra step, please consider reporting this to via the free bug tracker at https://support.zabbix.com/

OK, thanks for the tip. Created ticket https://support.zabbix.com/browse/ZBX-22107