[JIRA] (OSJ-360) Regenerate PKIX test certs with SHA-2
Scott Cantor (Jira)
jira at shibboleth.atlassian.net
Thu Sep 8 16:59:46 UTC 2022
Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 ) *created* an issue
OpenSAML - Java ( https://shibboleth.atlassian.net/browse/OSJ?atlOrigin=eyJpIjoiMDRlM2RmNzU5MTg0NGM4ZTlhMTk1YzY1ZGUxZjVkYjUiLCJwIjoiaiJ9 ) / Bug ( https://shibboleth.atlassian.net/browse/OSJ-360?atlOrigin=eyJpIjoiMDRlM2RmNzU5MTg0NGM4ZTlhMTk1YzY1ZGUxZjVkYjUiLCJwIjoiaiJ9 ) OSJ-360 ( https://shibboleth.atlassian.net/browse/OSJ-360?atlOrigin=eyJpIjoiMDRlM2RmNzU5MTg0NGM4ZTlhMTk1YzY1ZGUxZjVkYjUiLCJwIjoiaiJ9 ) Regenerate PKIX test certs with SHA-2 ( https://shibboleth.atlassian.net/browse/OSJ-360?atlOrigin=eyJpIjoiMDRlM2RmNzU5MTg0NGM4ZTlhMTk1YzY1ZGUxZjVkYjUiLCJwIjoiaiJ9 )
Issue Type: Bug Affects Versions: 4.0.0, 4.0.1, 4.1.0, 4.1.1, 4.2.0 Assignee: Brent Putman ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A97de0981-adc3-4044-95ed-131622fad81e ) Components: Security Created: 08/Sep/22 12:59 PM Fix Versions: 4.3.0 Priority: Trivial Reporter: Scott Cantor ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5b78efc9-1379-42cc-a3f6-56c6ea3a0007 )
The new RH9 security policies block SHA-1 certs, so it appears the PKIX test data may need to be regenerated with SHA-2. Hopefully that Python script I see in opensaml-security-impl can do that relatively easily.
( https://shibboleth.atlassian.net/browse/OSJ-360#add-comment?atlOrigin=eyJpIjoiMDRlM2RmNzU5MTg0NGM4ZTlhMTk1YzY1ZGUxZjVkYjUiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/OSJ-360#add-comment?atlOrigin=eyJpIjoiMDRlM2RmNzU5MTg0NGM4ZTlhMTk1YzY1ZGUxZjVkYjUiLCJwIjoiaiJ9 )
Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100206- sha1:66dd41f )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20220908/bf7c3eca/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-1fa977d7-58c1-483b-99ca-0c9dd7ae2678
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220908/bf7c3eca/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-f7c3044f-90e6-45ef-9ad2-7195f23a2876
Type: image/png
Size: 563 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220908/bf7c3eca/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-058b717a-7c30-426c-bfae-364d8dc472d9
Type: image/png
Size: 425 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220908/bf7c3eca/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-87737f33-7194-49dc-9ef9-6c92078be8ad
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20220908/bf7c3eca/attachment-0007.png>
More information about the commits
mailing list