[ovs-dev] [PATCH] ovs-pki: Use SHA-1 instead of SHA-512 as message digest.

Ben Pfaff blp at nicira.com
Tue Sep 23 01:27:31 UTC 2014


On Mon, Sep 22, 2014 at 03:53:31PM -0700, Alex Wang wrote:
> Commit 9ff33ca7 (ovs-pki: Use SHA-512 instead of MD5 as message
> digest.) changes the message digest algorithm to SHA-512.  This
> seems to break the unit tests on some xenserver 5.6/6.0 builds
> causing the error: "SSL_connect: error:0D0C50A1:asn1 encoding
> routines:ASN1_item_verify:unknown message digest algorithm".
> 
> As a solution, this commit changes the message digest algorithm
> to SHA-1 which works for both the above xenserver builds and
> centos 7.
> 
> VMware-BZ: #1319116
> 
> Acked-by: Alex Wang <alexw at nicira.com>

This seems like the best compromise for now.  Thank you!

Acked-by: Ben Pfaff <blp at nicira.com>



More information about the dev mailing list