3 ms·
I hope this is just bad wording and not a setting that actually disables certificate validation? They can't possibly mean it will accept even invalid SHA1 certi
by 0x0 11y ago
I hope this is just bad wording and not a setting that actually disables certificate validation? They can't possibly mean it will accept even invalid SHA1 certificates?
> security.pki.sha1_enforcement_level” to 0 (which will accept all SHA-1 certificates)
- alainv 11y agoAs opposed to a tiered acceptance based on the issuance/expiry date of said certificate. https://support.globalsign.com/customer/portal/articles/1447169-sha-256-rollout https://support.globalsign.com/customer/portal/articles/1447...
- jvehent 11y agoSetting security.pki.sha1_enforcement_level to 0 will still only accept SHA-1 certs that are signed by a root CA in the NSS truststore. That setting only disables the SHA-1 deprecation logic.