Skip to content
This repository has been archived by the owner on Apr 22, 2023. It is now read-only.

Add missing GlobalSign root certificate which supports more secure sha25... #8678

Closed
wants to merge 1 commit into from
Closed

Add missing GlobalSign root certificate which supports more secure sha25... #8678

wants to merge 1 commit into from

Conversation

dodtsair
Copy link

@dodtsair dodtsair commented Nov 6, 2014

...6 algorithm.

Global Sign has three relevant root certificates:

GlobalSign Root R1
GlobalSign Root R2
GlobalSign Root R3

Both R1 and R2 are present, but R3 is missing.

R3 is the more secure root certificate authority that uses SHA256 instead of the degrading SHA1. The root certificate list should be fixed to include all three Global Sign Root certificates.

See article about SHA1's degrading viability as a secure hash algorithm:
https://www.schneier.com/blog/archives/2005/02/cryptanalysis_o.html

For validation here is the source of the certificate: https://support.globalsign.com/customer/portal/articles/1426602-globalsign-root-certificates

…a256 algorithm.

Global Sign has three relevant root certificates:

GlobalSign Root R1
GlobalSign Root R2
GlobalSign Root R3

Both R1 and R2 are present, but R3 is missing.

R3 is the more secure root certificate authority that uses SHA256 instead of the degrading SHA1. The root certificate list should be fixed to include all three Global Sign Root certificates.

See article about SHA1's degrading viability as a secure hash algorithm:
https://www.schneier.com/blog/archives/2005/02/cryptanalysis_o.html

For validation here is the source of the certificate: https://support.globalsign.com/customer/portal/articles/1426602-globalsign-root-certificates
@dodtsair
Copy link
Author

Closing this in favor of #8709

@dodtsair dodtsair closed this Nov 13, 2014
@dodtsair dodtsair deleted the add-globalsign-sha256 branch November 13, 2014 02:22
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants