Merge pull request #80 from jenkinsci/INFRA-717

[INFRA-717] sign with SHA-2
jenkinsci · Nov 1, 2016 · e50139c · e50139c
2 parents 008343f + 3800e72
commit e50139c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/deb/publish/publish.sh b/deb/publish/publish.sh
@@ -37,7 +37,7 @@ cat $D/merged/Contents | gzip -9c > $D/binary/Contents.gz
 apt-ftparchive -c $bin/release.conf release $D/binary > $D/binary/Release
 # sign the release file
 rm $D/binary/Release.gpg || true
-gpg --batch --no-use-agent --no-default-keyring --keyring "$GPG_KEYRING" --secret-keyring="$GPG_SECRET_KEYRING" --passphrase-file "$GPG_PASSPHRASE_FILE" \
+gpg --batch --no-use-agent --no-default-keyring --digest-algo=sha256 --keyring "$GPG_KEYRING" --secret-keyring="$GPG_SECRET_KEYRING" --passphrase-file "$GPG_PASSPHRASE_FILE" \
   -abs -o $D/binary/Release.gpg $D/binary/Release
 
 cp $D/binary/Packages.* $D/binary/Release $D/binary/Release.gpg $D/binary/Contents.gz $D/contents/binary