Re: [users@httpd] Enabling SHA1 for client certificates

2019-10-24 Thread Wouter Verhelst
setup/compilation than I can provide. Stefan Am 23.10.2019 um 17:07 schrieb Wouter Verhelst < <mailto:wouter.verhe...@zetes.com> wouter.verhe...@zetes.com >: Hi Stefan, Stefan Eissing schreef op wo 23-10-2019 om 16:33 [+0200]: I assume you have tried openssl

Re: [users@httpd] Enabling SHA1 for client certificates

2019-10-23 Thread Wouter Verhelst
let you verify that. If this is the case, question would be if some openssl config parameter can disable that for you. I think there are some people around here who should be able to find that out, once you have verified that with your certs. Cheers, Stefan Am 23.10.2019 um 11:49 schrieb W

Re: [users@httpd] Enabling SHA1 for client certificates

2019-10-23 Thread Wouter Verhelst
@lbutlr schreef op wo 23-10-2019 om 07:48 [-0600]: On 23 Oct 2019, at 03:49, Wouter Verhelst < <mailto:wouter.verhe...@zetes.com> wouter.verhe...@zetes.com > wrote: I know that SHA1 is insecure these days, but I have no control over the algorithms used in this particular CA, and

[users@httpd] Enabling SHA1 for client certificates

2019-10-23 Thread Wouter Verhelst
Hi, For reasons beyond my control, I need to allow client certificate authentication with certificates that are signed with SHA1 (I know -- don't ask). Upon installing Apache from Debian 10 "buster" and installing the CA certificate under SSLCACertificateFile, however, I get the following: [We