Backchannel failing after upgrade

James Drews james.drews at wisc.edu
Fri Jan 20 15:06:09 EST 2017


Following up (start of semester fires down to smoldering on my end). It appears that the backchannel doesn't like the certificate signature algorithm md5WithRSAEncryption.  If I create a new random cert with:

openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:1024 -keyout privateKey.key -out certificate.crt

and connect to the backchannel port by:

openssl s_client -state -nbio -cert ./certificate.crt -key privateKey.key -connect server:8443

it works. But if I gen a new random cert using the md5:

openssl req -x509 -md5 -nodes -days 365 -newkey rsa:1024 -keyout privateKey.key -out certificate.crt

then the connection is dropped right away when using that certificate.


Is there a way to (temporarily) have it accept that signature algorithm? Waiting for other fires to get put out so I can work with our SP person to regen the cert its using...

James



More information about the users mailing list