Reprepro uses SHA1 signatures

[micsurin]

Apt will treat the SHA1 signatures on InRelease files as invalid

[micsurin]

My solution was to append digest-algo SHA512 to the /data/.gnupg/gpg.conf file

[bbinet]

Ok, feel free to submit a pull request.