Re: [ovs-dev] [PATCH] ovs-pki: Use SHA-512 instead of MD5 as message digest.

2014-09-19 Thread Ben Pfaff
On Thu, Sep 18, 2014 at 10:09:58PM -0700, Ben Pfaff wrote: > This fixes numerous testsuite failures of the form "SSL_connect: > error:0D0C50A1:asn1 encoding routines:ASN1_item_verify:unknown message > digest algorithm" on systems that disable MD5 in OpenSSL. Centos 7 is one > example. Presumably

Re: [ovs-dev] [PATCH] ovs-pki: Use SHA-512 instead of MD5 as message digest.

2014-09-19 Thread Robert Strickler
msg digest changes to add Bens (blp) patch get reverted. utilities/ovs-pki utilities/ovs-pki.in openvswitch-2.3.0/tests/pki/controllerca/ca.cnf openvswitch-2.3.0/tests/pki/switchca/ca.cnf files where default_md is assigned all revert after: (cd ~/rpmbuild/BUILD/openvswitch-2.3.0 && make clean && r

[ovs-dev] [PATCH] ovs-pki: Use SHA-512 instead of MD5 as message digest.

2014-09-18 Thread Ben Pfaff
This fixes numerous testsuite failures of the form "SSL_connect: error:0D0C50A1:asn1 encoding routines:ASN1_item_verify:unknown message digest algorithm" on systems that disable MD5 in OpenSSL. Centos 7 is one example. Presumably it increase security as well for anyone who generates certificates