[jira] [Commented] (OFBIZ-12028) warning of sha-1

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Commented] (OFBIZ-12028) warning of sha-1

Nicolas Malin (Jira)

    [ https://issues.apache.org/jira/browse/OFBIZ-12028?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17210116#comment-17210116 ]

Jacques Le Roux commented on OFBIZ-12028:
-----------------------------------------

If that's a big problem for you you may swant to create your own local certificate. This may help you:

[https://docs.oracle.com/middleware/1213/wls/SECMG/identity_trust.htm#SECMG548]

Somehow related: [https://ci.apache.org/projects/ofbiz/site/trunk/pluginsdoc/ldap/html5/SingleSignOn.html]

At [https://ci.apache.org/projects/ofbiz/site/trunk/ofbizdoc/html5/developer-manual.html#_security] look for
{quote}Note: if you want to use a pair of public/private keys you might want to consider leveraging the Java Key Store that is also used by the "catalina" component to store certificates. Then don’t miss to read:
{quote}
You may also try to hide these messages in your browser/s. But I think it's done the other way (not hiding but filtering to see).

HTH

 

> warning of sha-1
> ----------------
>
>                 Key: OFBIZ-12028
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12028
>             Project: OFBiz
>          Issue Type: Bug
>          Components: ALL COMPONENTS
>    Affects Versions: Trunk
>            Reporter: Alex Bodnaru
>            Assignee: Jacques Le Roux
>            Priority: Major
>
> this warning is cluttering the console, potentially hiding more relevant warnings/errors.
> This site makes use of a SHA-1 Certificate; it’s recommended you use certificates with signature algorithms that use hash functions stronger than SHA-1
> maybe some configuration will help choosing another algo?



--
This message was sent by Atlassian Jira
(v8.3.4#803005)