31538 2015-11-26 13:18:02 +0300 Changing self-signed certificates signature algorithm to SHA256 2015-12-04 19:37:56 +0300 1 1 4 Development Sisyphus cert-sh-functions unstable all Linux CLOSED FIXED P3 enhancement --- 1 naf sem cas mike qa-sisyphus oldest_to_newest 153930 0 naf 2015-11-26 13:18:02 +0300 Для cert-sh-functions-1.0.1-alt1 самоподписанные сертификаты создаются с использованием SHA1: # . /usr/bin/cert-sh-functions # ssl_generate test # openssl x509 -in /var/lib/ssl/cert/test.cert -text | grep Signature Signature Algorithm: sha1WithRSAEncryption Signature Algorithm: sha1WithRSAEncryption С учётом известных проблем с SHA1, по-видимому, имеет смысл заменить его на SHA256. 153931 1 6435 naf 2015-11-26 13:25:25 +0300 Created attachment 6435 cert-sh-functions.patch 154153 2 repository-robot 2015-12-04 19:37:56 +0300 cert-sh-functions-1.0.2-alt1 -> sisyphus: * Fri Dec 04 2015 Mikhail Efremov <sem@altlinux> 1.0.2-alt1 - Use SHA256 for certificates (thx naf@) (closes #31538). 6435 2015-11-26 13:25:25 +0300 2015-11-26 13:25:25 +0300 cert-sh-functions.patch cert-sh-functions.patch text/plain 625 naf LS0tIC91c3IvYmluL2NlcnQtc2gtZnVuY3Rpb25zLm9yaWcJMjAxNS0xMS0xMiAyMTo1OTowMC4w MDAwMDAwMDAgKzAzMDAKKysrIC91c3IvYmluL2NlcnQtc2gtZnVuY3Rpb25zCTIwMTUtMTEtMjYg MTM6MDE6NDUuODUzNzM2NjAxICswMzAwCkBAIC0xNDQsNyArMTQ0LDcgQEAKICAgICBzc2xfY2hl Y2tfY2VydCAiJDEiICYmIHJldHVybgogCV9zc2xfY2hlY2tfYXJncyAiJEAiIHx8IHJldHVybiAx CiAKLQlpZiAhICIkT1BFTlNTTCIgeDUwOSAtcmVxIC1kYXlzICIkezI6LSRTU0xfQ0VSVF9EQVlT fSIgLWluICIkU1NMX0NTUkRJUi8kMS5jc3IiIC1zaWdua2V5ICIkU1NMX0tFWURJUi8kMS5rZXki IC1vdXQgIiRTU0xfQ0VSVERJUi8kMS5jZXJ0IiA+L2Rldi9udWxsIDI+JjE7IHRoZW4KKwlpZiAh ICIkT1BFTlNTTCIgeDUwOSAtcmVxIC1zaGEyNTYgLWRheXMgIiR7MjotJFNTTF9DRVJUX0RBWVN9 IiAtaW4gIiRTU0xfQ1NSRElSLyQxLmNzciIgLXNpZ25rZXkgIiRTU0xfS0VZRElSLyQxLmtleSIg LW91dCAiJFNTTF9DRVJURElSLyQxLmNlcnQiID4vZGV2L251bGwgMj4mMTsgdGhlbgogCQlfc3Ns X2Vycm9yICdVbmFibGUgdG8gY3JlYXRlIGNlcnRpZmljYXRlJwogCQlyZXR1cm4gMQogCWZpCg==