Table of contents

June 2024

Accounting records from ARC-CE 6.19 rejected

GridFTP client errors on Rocky and Alma 9 with SHA-1 certificates

  • there is a mismatch between the default security policies of RHEL 9 + derivatives and the use of SHA-1 by a number of CAs in IGTF.
  • RHEL 9 + derivatives and other recent Linux versions come with OpenSSL v3, which disables a number of legacy algorithms. In addition, RHEL 9 + derivatives disable SHA-1 by default.
  • Unfortunately, SHA-1 is still used in root certificates of various CAs.
    • Re-issuing a root certificate is a non-trivial, expensive process in IGTF.
  • The workaround is to run:
    update-crypto-policies --set DEFAULT:SHA1
  • Created an entry in the KEDB:

July 2024

August 2024


  • No labels