[ 
https://issues.apache.org/jira/browse/OFBIZ-12028?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17210116#comment-17210116
 ] 

Jacques Le Roux commented on OFBIZ-12028:
-----------------------------------------

If that's a big problem for you you may swant to create your own local 
certificate. This may help you:

[https://docs.oracle.com/middleware/1213/wls/SECMG/identity_trust.htm#SECMG548]

Somehow related: 
[https://ci.apache.org/projects/ofbiz/site/trunk/pluginsdoc/ldap/html5/SingleSignOn.html]

At 
[https://ci.apache.org/projects/ofbiz/site/trunk/ofbizdoc/html5/developer-manual.html#_security]
 look for
{quote}Note: if you want to use a pair of public/private keys you might want to 
consider leveraging the Java Key Store that is also used by the "catalina" 
component to store certificates. Then don’t miss to read:
{quote}
You may also try to hide these messages in your browser/s. But I think it's 
done the other way (not hiding but filtering to see).

HTH

 

> warning of sha-1
> ----------------
>
>                 Key: OFBIZ-12028
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12028
>             Project: OFBiz
>          Issue Type: Bug
>          Components: ALL COMPONENTS
>    Affects Versions: Trunk
>            Reporter: Alex Bodnaru
>            Assignee: Jacques Le Roux
>            Priority: Major
>
> this warning is cluttering the console, potentially hiding more relevant 
> warnings/errors.
> This site makes use of a SHA-1 Certificate; it’s recommended you use 
> certificates with signature algorithms that use hash functions stronger than 
> SHA-1
> maybe some configuration will help choosing another algo?



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to