re-enable SHA1 on alma9

conda-forge · Nov 11, 2024 · ceb783f · ceb783f
1 parent 22a5362
commit ceb783f
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/scripts/fix_rpm b/scripts/fix_rpm
@@ -17,6 +17,11 @@ if [[ "${DISTRO_NAME}${DISTRO_VER}" == "centos7" ]]; then
 elif [ "${DISTRO_NAME}${DISTRO_VER}" = "ubi8" ]; then
   rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
 elif [ "${DISTRO_NAME}" = "almalinux" ]; then
+  if [ "${DISTRO_VER}" = "9" ]; then
+    # alma9 removed SHA1 availability by default, but it's still needed for the
+    # RPM key; re-enable it. Details: https://access.redhat.com/articles/3666211
+    update-crypto-policies --set LEGACY
+  fi
   rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-AlmaLinux
 fi