Repository: brooklyn-server
Updated Branches:
  refs/heads/master 1298d378c -> b6247b48a


change cert signature hashing algorithm from md5 to sha256
- md5 use with certs has been disabled by default in Java 8u71+
- http://www.oracle.com/technetwork/java/javase/8u71-relnotes-2773756.html


Project: http://git-wip-us.apache.org/repos/asf/brooklyn-server/repo
Commit: http://git-wip-us.apache.org/repos/asf/brooklyn-server/commit/7814fc8f
Tree: http://git-wip-us.apache.org/repos/asf/brooklyn-server/tree/7814fc8f
Diff: http://git-wip-us.apache.org/repos/asf/brooklyn-server/diff/7814fc8f

Branch: refs/heads/master
Commit: 7814fc8f8a88a3df70e8e392fde44bb62d2253e1
Parents: d03f254
Author: John McCabe <[email protected]>
Authored: Tue Feb 2 23:53:56 2016 +0000
Committer: John McCabe <[email protected]>
Committed: Tue Feb 2 23:53:56 2016 +0000

----------------------------------------------------------------------
 .../java/org/apache/brooklyn/util/core/crypto/FluentKeySigner.java | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/brooklyn-server/blob/7814fc8f/core/src/main/java/org/apache/brooklyn/util/core/crypto/FluentKeySigner.java
----------------------------------------------------------------------
diff --git 
a/core/src/main/java/org/apache/brooklyn/util/core/crypto/FluentKeySigner.java 
b/core/src/main/java/org/apache/brooklyn/util/core/crypto/FluentKeySigner.java
index 24973cf..ecc7c36 100644
--- 
a/core/src/main/java/org/apache/brooklyn/util/core/crypto/FluentKeySigner.java
+++ 
b/core/src/main/java/org/apache/brooklyn/util/core/crypto/FluentKeySigner.java
@@ -50,7 +50,7 @@ public class FluentKeySigner {
     protected Date validityStartDate, validityEndDate;
     protected BigInteger serialNumber;
     
-    protected String signatureAlgorithm = "MD5WithRSAEncryption";
+    protected String signatureAlgorithm = "SHA256WithRSAEncryption";
     protected AuthorityKeyIdentifier authorityKeyIdentifier;
     protected X509Certificate authorityCertificate;
 

Reply via email to