re-enable SHA1 on alma9

conda-forge · Nov 11, 2024 · 3f162f7 · 3f162f7
1 parent 22a5362
commit 3f162f7
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/scripts/fix_rpm b/scripts/fix_rpm
@@ -17,6 +17,9 @@ if [[ "${DISTRO_NAME}${DISTRO_VER}" == "centos7" ]]; then
 elif [ "${DISTRO_NAME}${DISTRO_VER}" = "ubi8" ]; then
   rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
 elif [ "${DISTRO_NAME}" = "almalinux" ]; then
+  # alma9 removed SHA1 availability by default, but it's still in the RPM key;
+  # re-enable it. Details: https://access.redhat.com/articles/3666211
+  update-crypto-policies --set LEGACY
   rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 fi