Debian SHA-1 deprecation

From	Daniel Pocock <daniel@pocock.pro>
Newsgroups	linux.debian.security
Subject	Debian SHA-1 deprecation
Date	2016-05-18 15:30 +0200
Message-ID	<rA9HX-2GR-7@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw


Can anybody comment on how Debian users will be impacted by SHA-1
deprecation?

In particular:

- will libraries like OpenSSL and GnuTLS continue to support it in
stretch and beyond?

- will web servers like Apache support it in server certificates or
certificate chains?

- will web servers and other applications accept client certificates
containing SHA-1 hashes?

- if support for SHA-1 is being removed or disabled by default, will it
also be disabled in security updates to jessie and wheezy LTS?

Back to linux.debian.security | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Debian SHA-1 deprecation Daniel Pocock <daniel@pocock.pro> - 2016-05-18 15:30 +0200
  Re: Debian SHA-1 deprecation Elmar Stellnberger <estellnb@gmail.com> - 2016-05-18 17:20 +0200
    Re: Debian SHA-1 deprecation Paul Wise <pabs@debian.org> - 2016-05-19 03:30 +0200
  Re: Debian SHA-1 deprecation Paul Wise <pabs@debian.org> - 2016-05-19 03:20 +0200
    Re: Debian SHA-1 deprecation Daniel Pocock <daniel@pocock.pro> - 2016-05-19 09:40 +0200

csiph-web