diff options
| author | Kurt Roeckx <kurt@roeckx.be> | 2020-01-02 23:25:27 +0100 |
|---|---|---|
| committer | Kurt Roeckx <kurt@roeckx.be> | 2020-02-05 22:07:38 +0100 |
| commit | 68436f0a8964e911eb4f864bc8b31d7ca4d29585 (patch) | |
| tree | cfe4c18cfcb43ea754c04962df50c1994949ce94 /NEWS | |
| parent | b98efebeb2d4265bd6638d5947fe365500121e03 (diff) | |
Stop accepting certificates signed using SHA1 at security level 1
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
GH: #10786
(cherry picked from commit b744f915ca8bb37631909728dd2529289bda8438)
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 5 |
1 files changed, 4 insertions, 1 deletions
@@ -7,7 +7,10 @@ Major changes between OpenSSL 1.1.1d and OpenSSL 1.1.1e [under development] - o + o X509 certificates signed using SHA1 are no longer allowed at security + level 1 or higher. The default security level for TLS is 1, so + certificates signed using SHA1 are by default no longer trusted to + authenticate servers or clients. Major changes between OpenSSL 1.1.1c and OpenSSL 1.1.1d [10 Sep 2019] |