#1 2016-04-04 15:51:22

cloverskull

Member

Registered: 2015-10-01

Posts: 348

Fix broken pepperflash updater with new APT versions

Hey guys,

I'm tracking sid and a lot of 3rd party repos no longer work because their key algorithm is too weak (SHA1). The biggest offenders so far appear to be google.

So, I was able to install the pepperflash stuff no problem from the debian repos but during the `update-pepperflashplugin-nonfree` portion I received this error:

sudo update-pepperflashplugin-nonfree --install
ERROR: failed to retrieve status information from google : W: http://dl.google.com/linux/chrome/deb/dists/stable/Release.gpg: Signature by key 4CCA1EAF950CEE4AB83976DCA040830F7FAC5991 uses weak digest algorithm (SHA1)
More information might be available at:
  http://wiki.debian.org/PepperFlashPlayer

Here's a script that will fix it for you. Put this script in /usr/sbin/update-pepperflashplugin-nonfree2, chmod +x the script, and run it with sudo. Then, if you have a daily cron task to update this, point it to the new script instead of the old broken one.

The script:

#!/bin/sh
# Copyright (C) 2006-2013 Bart Martens <bartm@knars.be>
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
# 
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
# 
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
set -e
arch=`dpkg --print-architecture`
deburl=https://dl.google.com/linux/direct/google-chrome-stable_current_"$arch".deb
UNPACKDIR=`mktemp -d /tmp/pepperflashplugin-nonfree.XXXXXXXXXX`
debfile=google-chrome-stable_current_"$arch".deb
wgetoptions="$wgetoptions -O $UNPACKDIR/$debfile" # to change wget message : Saving to ...
HOME=/root wget $wgetoptions $deburl 
cd $UNPACKDIR
dpkg-deb -x $debfile unpackchrome
sofile=unpackchrome/opt/google/chrome/PepperFlash/libpepflashplayer.so
[ -e $sofile ] || sofile=unpackchrome/opt/google/chrome-unstable/PepperFlash/libpepflashplayer.so
[ -e $sofile ] || sofile=unpackchrome/opt/google/chrome-beta/PepperFlash/libpepflashplayer.so
[ -e $sofile ] || sofile=unpackchrome/opt/google/chrome/PepperFlash/libpepflashplayer.so
mv -f $sofile /usr/lib/pepperflashplugin-nonfree
chown root:root /usr/lib/pepperflashplugin-nonfree/libpepflashplayer.so
chmod 644 /usr/lib/pepperflashplugin-nonfree/libpepflashplayer.so
jsonfile=unpackchrome/opt/google/chrome/PepperFlash/manifest.json
[ -e $jsonfile ] || jsonfile=unpackchrome/opt/google/chrome-unstable/PepperFlash/manifest.json
[ -e $jsonfile ] || jsonfile=unpackchrome/opt/google/chrome-beta/PepperFlash/manifest.json
[ -e $jsonfile ] || jsonfile=unpackchrome/opt/google/chrome/PepperFlash/manifest.json
if [ -e $jsonfile ]
then
    mv -f $jsonfile /usr/lib/pepperflashplugin-nonfree
    chown root:root /usr/lib/pepperflashplugin-nonfree/manifest.json
    chmod 644 /usr/lib/pepperflashplugin-nonfree/manifest.json
fi
cd ..
rm -rf $UNPACKDIR