Azure / Azure/azure-cli

SHA1 Deprecation Prevents Repositrory Based Installation on Debian

Open
#32,731 3 comments 3 reactions 3 assignees Claimed by @naga-nandyala View on GitHub
act-platform-engineering-squad Azure CLI Team customer-reported feature-request Installation Similar-Issue
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

### Describe the bug

Hi there 👋

not sure whether this falls unto the responsibility of the repository maintainers, but installation from the apt-repository (`https://packages.microsoft.com/repos/azure-cli/`) fails because SHA1 signatures are used that are no longer supported since Feb 01, 2026.

It might be general a good idea to add support for debian 13, because currently there seems to be no `trixie` dist available in `https://packages.microsoft.com/repos/azure-cli/dists/` 🤔

### Related command

Follow the installation instructions on `https://learn.microsoft.com/de-de/cli/azure/install-azure-cli-linux`. Then run:

```
sudo apt install azure-cli
```

### Errors

```
An error occurred during the signature verification.
...
OpenPGP signature verification failed: https://packages.microsoft.com/repos/azure-cli bookworm InRelease
...
error message is: Signing key on BC528686B50D79E339D3721CEB3E94ADBE1229CF is not bound:
No binding signature at time 2026-01-13T03:52:28Z
because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance
because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
```

### Issue script & Debug output

Not applicable

### Expected behavior

Installation should work fine.

### Environment Summary

`azure-cli` version should not matter here. Operating system is Debian 13. Not sure whether SHA1 deprecation was also enforced on other Debian versions.

### Additional context

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.