Unable to install Symcon: hash not considered strong enough for security purposes

I am trying to install IP-Symcon on an Odroid C2 running Ubuntu 16.04 beta.

Unfortunately apt is not happy with the provided MD5 and SHA1 hashes. When I run apt-get update the following error is thrown:

E: Failed to fetch http://apt.ip-symcon.de/dists/stable/Release  No Hash entry in Release file /var/lib/apt/lists/partial/apt.ip-symcon.de_dists_stable_Release which is considered strong enough for security purposes
E: Some index files failed to download. They have been ignored, or old ones used instead.

The error is probably related to:
Clarifications and updates on APT + SHA1 – Blog of Julian Andres Klode
Bug #1558331 “message “The repository is insufficiently signed b…” : Bugs : apt package : Ubuntu

Possible solution: include SHA256 hashes and PGP signature as well?

Hi,

we officially only support Ubuntu 14.04 at the moment.

Though i added SHA256 hashes. Can you try if it works?

paresy

I now get the following warnings and error:

W: http://apt.ip-symcon.de/dists/stable/Release.gpg: Signature by key 24FFA404DFEC3FBCCFE0917EF06C1468340D3A2A uses weak digest algorithm (SHA1)
W: Invalid 'Date' entry in Release file /var/lib/apt/lists/partial/apt.ip-symcon.de_dists_stable_Release
E: Failed to fetch http://apt.ip-symcon.de/dists/stable/Release  Unable to find expected entry 'rpi/binary-arm64/Packages' in Release file (Wrong sources.list entry or malformed file)

The system is running an ARM64 kernel. I have been trying things like without much succes:

dpkg --add-architecture armhf
apt-get install symcon:armhf

I am not much of a Linux or Ubuntu expert. It’s probably a better idea to find a 32-bit image for the Odroid C2. Hardware wise it’s a very nice board: 2GHz CPU, 2GB RAM, gigabit ethernet, eMMC + SD memory.

Indeed. We only provide 32 bit builds. You should possibly looks around if you can get a modified raspbian image. Those are reported to be working fine (at least for BananaPi boards)

paresy

I have tried the hybrid 64/32-bit Odrobian image. I was able to install IP-Symcon after adding „[arch=armhf]“ to the IP Symcon source line in/etc/apt/sources.list". IPS wouldn’t run though, it quietly shutdown. The last item in the log was something like ‚cleaning up backups‘.

So I went back to the 64-bit Ubuntu 16.04 image that came pre-installed on the eMCC module and added [arch=armhf] to the source list:

 deb [arch=armhf] http://apt.ip-symcon.de/ stable rpi

(previously I had already added armhf as a foreign architecture)

After installing some missing libraries I was able to install IPS.

Fix for issue “/usr/bin/symcon: error while loading shared libraries: libssl.so.1.0.0: cannot open shared object file: No such file or directory”:

 sudo apt-get install libssl1.0.0:armhf libssl-dev:armf

Fix for issue "“/usr/bin/symcon: error while loading shared libraries: libcurl.so.4: cannot open shared object file: No such file or directory”:

 sudo apt-get install libcurl4-openssl-dev:armhf

IPS is running fine now :slight_smile: .