lhotari commented on pull request #10336:
URL: https://github.com/apache/pulsar/pull/10336#issuecomment-825775219
There are also some invalid certificate files created as .pem files. Here's
a list of the invalid ones which use SHA1:
```
❯ find -name "*.pem" |grep src |xargs -i{} bash -c "{ openssl x509 -text -in
{} 2>/dev/null | grep -q 'Signature Algorithm: sha1'; } && echo {}"
./bouncy-castle/bcfips-include-test/src/test/resources/authentication/tls/broker-cert.pem
./bouncy-castle/bcfips-include-test/src/test/resources/authentication/tls/client-cert.pem
./bouncy-castle/bcfips-include-test/src/test/resources/authentication/tls/cacert.pem
./pulsar-proxy/src/test/resources/authentication/tls/client-cert.pem
./pulsar-proxy/src/test/resources/authentication/tls/server-cert.pem
./pulsar-proxy/src/test/resources/authentication/tls/ProxyWithAuthorizationTest/proxy-cacert.pem
./pulsar-proxy/src/test/resources/authentication/tls/ProxyWithAuthorizationTest/client-cacert.pem
./pulsar-proxy/src/test/resources/authentication/tls/ProxyWithAuthorizationTest/broker-cert.pem
./pulsar-proxy/src/test/resources/authentication/tls/ProxyWithAuthorizationTest/proxy-cert.pem
./pulsar-proxy/src/test/resources/authentication/tls/ProxyWithAuthorizationTest/client-cert.pem
./pulsar-proxy/src/test/resources/authentication/tls/ProxyWithAuthorizationTest/broker-cacert.pem
./pulsar-proxy/src/test/resources/authentication/tls/cacert.pem
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
