Hide Forgot
Description of problem: Generated certificates are signed with sha1 instead of sha256. Version-Release number of selected component (if applicable): 6.1.5, likely all How reproducible: 100% Steps to Reproduce: 1. Install satellite or generate capsule certificates 2. Inspect certificates Actual results: Certificates are signed with a sha1 algorithm Expected results: Certificates should be signed with a sha2 algorithm Additional info: This appears to have been fixed in katello upstream https://github.com/Katello/katello-certs-tools/commit/b68836ab1b70d085691168dbc3748769c405e522
Connecting redmine issue http://projects.theforeman.org/issues/10777 from this bug
QE: ping ehelms or someone else on dev on what ssl commands to use
[xyz@abc certs]# ls *.crt abc.redhat.com-apache.crt abc.redhat.com-qpid-broker.crt abc.redhat.com-foreman-client.crt abc.redhat.com-qpid-client-cert.crt abc.redhat.com-foreman-proxy-client.crt abc.redhat.com-qpid-router-client.crt abc.redhat.com-foreman-proxy.crt abc.redhat.com-qpid-router-server.crt abc.redhat.com-puppet-client.crt [xyz@abc certs]# for i in `ls *.crt`; do openssl x509 -text -noout -in $i | grep -i sha256WithRSAEncryption; done Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption Signature Algorithm: sha256WithRSAEncryption All the certs now use sha256 and not sha1 algorithm
VERIFIED with sat62-snap6
*** Bug 1314418 has been marked as a duplicate of this bug. ***
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2016:1500