Untrusted public key algorithm error on Imunify360 repo with Ubuntu 24.04

[mkep]

Good morning.

We've been seeing this sort of error when trying to `apt-get update` on our Ubuntu 24.04 LTS systems. We've seen mention of this over in the Plesk forum but in this case we are not using Plesk on this server.

[2025-06-05 13:49:19] Err:5 https://repo.imunify360.cloudlinux.com/imunify360/ubuntu/24.04 noble InRelease", "[2025-06-05 13:49:19]   The following signatures were invalid: 9EE467641C635726A184D64B8C55A6628608CB71 (untrusted public key algorithm: dsa1024)

As I understand it, there are some workarounds that could be done on our end to configure our system to ignore the untrusted public key, but I believe most system administrators are expecting CloudLinux to update the key use a trusted public key algorithm moving forward. Is there an ETA for this sort of update?

Thanks!

[alevchenko]

Hello,

There is indeed a way to suppress the warning using the following command:

echo 'APT::Key::Assert-Pubkey-Algo ">=rsa2048,ed25519,ed448,dsa1024";' | sudo tee /etc/apt/apt.conf.d/99weakkey-warning

As for the permanent fix, I can see that this was relayed to our developers, who informed us about their plans to add a new PGP key and gradually replace it for all clients. Yet no ETA for now, unfortunately.