[ovs-git] [openvswitch/ovs] 29dd78: ovs-pki: Use SHA-512 instead of SHA-1 as message d...

GitHub noreply at github.com
Fri Jul 22 20:26:26 UTC 2016


  Branch: refs/heads/master
  Home:   https://github.com/openvswitch/ovs
  Commit: 29dd784d7634e98f16728343df2e57e9fd9d26f2
      https://github.com/openvswitch/ovs/commit/29dd784d7634e98f16728343df2e57e9fd9d26f2
  Author: Ben Pfaff <blp at ovn.org>
  Date:   2016-07-22 (Fri, 22 Jul 2016)

  Changed paths:
    M NEWS
    M utilities/ovs-pki.in

  Log Message:
  -----------
  ovs-pki: Use SHA-512 instead of SHA-1 as message digest.

The upcoming OpenSSL 1.1.0 release disables use of SHA-1, which breaks the
OVS unit tests, which use SHA-1.  We last tried to switch to SHA-512 in
2014 with commit 9ff33ca75e9fcc ("ovs-pki: Use SHA-512 instead of MD5 as
message digest."), but we had to downgrade to SHA-1 in commit 4a1f9610682d
("ovs-pki: Use SHA-1 instead of SHA-512 as message digest.") because
XenServer did not support SHA-512.  It has been a few years, so let's try
again.

CC: 828478 at bugs.debian.org
Reported-at: https://bugs.debian.org/828478
Reported-by: Kurt Roeckx <kurt at roeckx.be>
Signed-off-by: Ben Pfaff <blp at ovn.org>
Acked-by: Ryan Moats <rmoats at us.ibm.com>




More information about the git mailing list