installing from apt repository broken for Debian9

[#1]

I am trying to install the cloudera distribution according to the guide here

https://www.cloudera.com/documentation/enterprise/latest/topics/cdh_ig_cdh5_install.html#topic_4_4_1...

This no longer works because the archive.key used by cloudera is no longer considered secure.

pub   dsa1024 2009-04-22 [SC]
      F36A 89E3 3CC1 BD0F 7107  9007 3275 74EE 02A8 18DD
uid           [ unknown] Cloudera Apt Repository
sub   elg2048 2009-04-22 [E]

As you can see, the key is quite old and using algorithms that are no longer considered secure by Debian9 (and latest Ubuntu versions). an apt update fails with:

Err:6 http://archive.cloudera.com/cdh5/ubuntu/xenial/amd64/cdh xenial-cdh5 InRelease 
The following signatures were invalid: F36A89E33CC1BD0F71079007327574EE02A818DD

Please update your repository with a key following modern security standards. 🙂

[#2 · Accepted solution]

I have forwarded this over the the engineering team to look into. Thanks for the feedback. 🙂

[#3]

Hi,

Any update ? I still have the same issue.

Thanks.

[#4]

I'll check and get back to you. 

[#5]

Thanks @cjervis

For informations I get the same things with an Ubuntu 18.

https://www.cloudera.com/documentation/enterprise/5-14-x/topics/cdh_ig_cdh5_install.html