Follow-up Comment #7, sr #106651 (project administration): Nick: we don't use MD5 since 2008 as far as I remember - and neither do CAcert.org: $ gnutls-cli --print-cert savannah.gnu.org </dev/null >sv.pem $ certtool -i < sv.pem | grep 'Signature Algo' Signature Algorithm: RSA-SHA
An MD5 cert would produce a warnings in GnuTLS: Signature Algorithm: RSA-MD5 warning: signed using a broken signature algorithm that can be forged. _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/support/?106651> _______________________________________________ Message sent via/by Savannah http://savannah.gnu.org/