Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement OpenSSL 1.0 hashing algorithm #27

Open
bbockelm opened this issue Oct 14, 2012 · 2 comments
Open

Implement OpenSSL 1.0 hashing algorithm #27

bbockelm opened this issue Oct 14, 2012 · 2 comments

Comments

@bbockelm
Copy link
Contributor

Right now, JGlobus will perform a few optimizations based on a hashing algorithm (MD5) used by OpenSSL 0.9.8. The hash optimizations provide a quick-lookup path for a CA's certificate, CRL and signing policy without having to parse all files in a directory. This is especially important for clients as the modern IGTF CA distribution has several hundred files.

However, OpenSSL 1.0.0 switched the hashing algorithm to be based on SHA-1. We should update JGlobus to provide that algorithm, and allow the hash algorithm to be selected at runtime.

@vijayanand
Copy link
Member

Sure sounds good. I think if we add all the SHA family that would be better.

@okoeroo
Copy link

okoeroo commented Oct 15, 2012

Adding all doesn't really make sense here...

It's exclusively used to do a file lookup based on the filename being a md5 or sha1 hash of the CAs subject (where the subject lookup part is an IIRC). OpenSSL has moved from md5 to sha1. It doesn't make sense to look for filenames with the hash values of all the possible SHA family options before giving up that the CA files are not installed on disk :-)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants