Bug 31538
| Summary: | Changing self-signed certificates signature algorithm to SHA256 | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Sisyphus | Reporter: | Nikolay A. Fetisov <naf> | ||||
| Component: | cert-sh-functions | Assignee: | Mikhail Efremov <sem> | ||||
| Status: | CLOSED FIXED | QA Contact: | qa-sisyphus | ||||
| Severity: | enhancement | ||||||
| Priority: | P3 | CC: | cas, mike | ||||
| Version: | unstable | ||||||
| Hardware: | all | ||||||
| OS: | Linux | ||||||
| Attachments: |
|
||||||
Created attachment 6435 [details]
cert-sh-functions.patch
|
Description
Nikolay A. Fetisov 2015-11-26 13:18:02 MSKДля cert-sh-functions-1.0.1-alt1 самоподписанные сертификаты создаются с использованием SHA1: # . /usr/bin/cert-sh-functions # ssl_generate test # openssl x509 -in /var/lib/ssl/cert/test.cert -text | grep Signature Signature Algorithm: sha1WithRSAEncryption Signature Algorithm: sha1WithRSAEncryption С учётом известных проблем с SHA1, по-видимому, имеет смысл заменить его на SHA256.