Uploaded image for project: 'Red Hat Data Grid'
  1. Red Hat Data Grid
  2. JDG-7032

[Operator] generates truststore from certs using outdated algorithms

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • RHDG 8.5.0 GA
    • RHDG 8.4.x CD, RHDG 8.5.x CD
    • Operator
    • None

      SSLMate go-pkcs12 utility at version 0.2.0 is using pbeWithSHA1And40BitRC2-CBC encryption for the truststore which is considered outdated and weak for modern standards. It also doesn't allow for this feature to be used in FIPS enabled environment.

      0.4.0 version added option to use modern encryption standards that work on FIPS enabled environments.

      Upstream issue: https://github.com/infinispan/infinispan-operator/issues/2066

              rhn-support-pdrobek Pavel Drobek
              rhn-support-pdrobek Pavel Drobek
              Pavel Drobek Pavel Drobek
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: