https://bugzilla.redhat.com/show_bug.cgi?id=1158767 Bug ID: 1158767 Summary: RELNOTES - Certificates signed with MD5 algorithm are not verified anymore Product: Fedora Documentation Version: devel Component: release-notes Assignee: relnotes@xxxxxxxxxxxxxxxxx Reporter: tmraz@xxxxxxxxxx QA Contact: docs-qa@xxxxxxxxxxxxxxxxxxxxxxx CC: relnotes@xxxxxxxxxxxxxxxxx, wb8rcr@xxxxxxxx, zach@xxxxxxxxxx Blocks: 168083 (fc5-relnotes-traqr) OpenSSL was patched to disallow verification of certificates that are signed with MD5 algorithm. The use of MD5 hash algorithm for certificate signatures is now considered as insecure and thus all the main crypto libraries in Fedora were patched to reject such certificates. Certificates signed with MD5 algorithm are not present on public https web sites anymore but they can be still in use on private networks or used for authentication on openvpn based VPNs such as in bug 1157260. It is highly recommended to replace such certificates with new ones signed with SHA256 or at least SHA1. As a temporary measure the OPENSSL_ENABLE_MD5_VERIFY environment variable can be set to allow verification of certificates signed with MD5 algorithm. Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=168083 [Bug 168083] FC5 release notes tracker bug -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug. -- relnotes-content mailing list relnotes-content@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/relnotes-content
