Re: [users@httpd] Peer digest using sha1 on TLS connection - Chrome fails

2023-10-12 Thread Craig H Silva (Cenitex)
e the existing certificate for xxx.xxx.xxx.domain (which was SHA2)." From: Pedro Coelho Silva Sent: Friday, October 13, 2023 5:42 AM To: users@httpd.apache.org Subject: Re: [users@httpd] Peer digest using sha1 on TLS connection - Chrome fails CAUTION: Cenite

Re: [users@httpd] Peer digest using sha1 on TLS connection - Chrome fails

2023-10-12 Thread Pedro Coelho Silva
Is the CA cert signed with SHA-1? If so, you can try to check if the CA has a cross-signed CA cert with SHA2 you can use for the customer's current certificate chain or just tell your customer to reissue the cert with a full SHA2 chain. Best Regards /P -- -- On Thu, 12 Oct 2023 at 04:27, Craig H

[users@httpd] Peer digest using sha1 on TLS connection - Chrome fails

2023-10-11 Thread Craig H Silva (Cenitex)
This is probably not the most appropriate mail list to ask this question. Basically we have apache 2.4.3 on a solaris 10 host running openssl 1.0.2zf. This was OK up until the 117 release of Chrome, which now rejects sha1. Funny thing is that one vhost with the same ssl config is ok, whilst on