Policy will reject signature

Plex Media Server
1

Server Version#: 1.42.2.10156

Good morning, when I go to perform the update, I get the following warning:
warning: https://downloads.plex.tv/repo/deb/dists/public/InRelease: Policy will reject signature within a year, see --audit for details

How can I fix the problem?

No LSB modules are available.
Distributor ID: Debian
Description: Debian GNU/Linux 13 (trixie)
Release: 13
Codename: trixie

2

Yes, I am waiting too, that Plex is fixing this. I think Debian will reject the key in early 2026, aka 2026-02-01.

Audit: https://downloads.plex.tv/repo/deb/dists/public/InRelease: Sub-process /usr/bin/sqv returned an error code (1), error message is:
   Signing key on CD...9D is not bound:
              No binding signature at time 2025-09-22T18:33:03Z
     because: Policy rejected non-revocation signature (PositiveCertification) requiring second pre-image resistance
     because: SHA1 is not considered secure since 2026-02-01T00:00:00Z
3

@ChuckPa Any chance you can get someone to answer this question?

4
5

Not trying to be a nag but thats 67 days from today… Not including any time off, so thats FAST approaching

6

@dbirch

Good thing you’re not my wife :stuck_out_tongue: ROFL ROFL

There is a lot going on internally about this.

Prior to the certificates being updated, other work MUST be completed.

That’s the priority right now.

I know the cert is important but, compared to the other work, it’s trivial (create a certificate, publish the public part, start signing builds with it).

It will get done. Don’t worry. It might be a photo finish but it’ll make it