Backchannel failing after upgrade
James Drews
james.drews at wisc.edu
Fri Jan 20 15:06:09 EST 2017
Following up (start of semester fires down to smoldering on my end). It appears that the backchannel doesn't like the certificate signature algorithm md5WithRSAEncryption. If I create a new random cert with:
openssl req -x509 -sha256 -nodes -days 365 -newkey rsa:1024 -keyout privateKey.key -out certificate.crt
and connect to the backchannel port by:
openssl s_client -state -nbio -cert ./certificate.crt -key privateKey.key -connect server:8443
it works. But if I gen a new random cert using the md5:
openssl req -x509 -md5 -nodes -days 365 -newkey rsa:1024 -keyout privateKey.key -out certificate.crt
then the connection is dropped right away when using that certificate.
Is there a way to (temporarily) have it accept that signature algorithm? Waiting for other fires to get put out so I can work with our SP person to regen the cert its using...
James
More information about the users
mailing list