Jira (PUP-3176) Puppet 2.7.x still signs CSR with MD5

[Charlie Sharpsteen (JIRA)]

Title: Message Title

Charlie Sharpsteen commented on an issue   Re: Puppet 2.7.x still signs CSR with MD5 To summarize the discussion in the Pull Request: The 2.7.x series is past end of life is is rapidly approaching the security fix event horizon at the end of September 2014. There is a chance this could get accepted into one last security release, but all users still on 2.7.x are strongly encouraged to upgrade to 3.x. Add Comment   Puppet / PUP-3176 Puppet 2.7.x still signs CSR with MD5 By default, Puppet 2.7 signs all CSR's with MD5. This causes issues with newer puppetmasters who have a version of SSL that will not sign such a CSR (such as on RHEL 7 or Fedora 20)     # puppet cert sign <redacted hostname>     Error: unknown message digest algorithm This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.