[Pki-users] Re: SCEP enrollment: No such algorithm: SHA1/RSA for provider Mozilla-JSS

2024-04-08 Thread Marc Sauton
SHA-1 may have been removed from JSS: https://github.com/dogtagpki/jss/pull/950 On Mon, Apr 8, 2024 at 1:01 PM Marc Sauton wrote: > you may need to change the system's cryptographic policies to either > "LEGACY" or "DEFAULT:SHA1", as SHA-1 has been deprecated: > > update-crypto-policies --set

[Pki-users] Re: SCEP enrollment: No such algorithm: SHA1/RSA for provider Mozilla-JSS

2024-04-08 Thread Marc Sauton
you may need to change the system's cryptographic policies to either "LEGACY" or "DEFAULT:SHA1", as SHA-1 has been deprecated: update-crypto-policies --set DEFAULT:SHA1 reboot and test again see: man update-crypto-policies man crypto-policies doc link: 3.3. Setting up system-wide cryptographic