https://bugzilla.gnome.org/show_bug.cgi?id=745588

            Bug ID: 745588
           Summary: Update intermediate certificates to use SHA2 hash
    Classification: Infrastructure
           Product: sysadmin
           Version: unspecified
                OS: All
            Status: NEW
          Severity: normal
          Priority: Normal
         Component: Other
          Assignee: [email protected]
          Reporter: [email protected]
        QA Contact: [email protected]
     GNOME version: ---

https://community.qualys.com/blogs/securitylabs/2014/09/09/sha1-deprecation-what-you-need-to-know

The current *.gnome.org certificates makes use of SHA1 for:
- the actual certificate
- the intermediate certificates

I think we should start replacing the intermediate certificates:
https://www.startssl.com/certs/
https://www.startssl.com/certs/class2/sha2/ (seems like it)

We're pretty good according to SSLLabs, just need to fix the hash:
https://www.ssllabs.com/ssltest/analyze.html?d=bugzilla.gnome.org

-- 
You are receiving this mail because:
You are watching the QA Contact of the bug.
You are watching the assignee of the bug.
_______________________________________________
gnome-infrastructure mailing list
[email protected]
https://mail.gnome.org/mailman/listinfo/gnome-infrastructure

Reply via email to