As announced in the IGTF 1.140 README SSLeay and OpenSSL 0.x series subject name subject name hashes based on MD5 were officially deprecated with a plan to remove them after August 2026. Right now voms-proxy-init still initialize CaNL-java validation without explicit request to use SHA1 hashes
|
certChainValidator = builder.trustAnchorsDir(trustAnchorsDir) |
|
.storeUpdateListener(storeUpdateListener) |
|
.lazyAnchorsLoading(true) |
|
.validationErrorListener(certChainValidationErrorListener) |
|
.build(); |
while e.g. dCache now explicitly specify OpensslHashFunction.SHA1
dCache/dcache@b3ec0da
As announced in the IGTF 1.140 README SSLeay and OpenSSL 0.x series subject name subject name hashes based on MD5 were officially deprecated with a plan to remove them after August 2026. Right now
voms-proxy-initstill initialize CaNL-java validation without explicit request to use SHA1 hashesvoms-clients/src/main/java/org/italiangrid/voms/clients/impl/DefaultVOMSProxyInitBehaviour.java
Lines 276 to 280 in 40a877c
while e.g. dCache now explicitly specify
OpensslHashFunction.SHA1dCache/dcache@b3ec0da