cloudflare / cloudflare/cfssl

Updating ComputeSKI to use SHA-256 instead of SHA-1.

Open
#1,401 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
9.5k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

Would like to update the generation of the SKI to use a more modern algorithm. Seems prudent in the face of SHA-1 problems.

Already rolled out by [letsencrypt](https://community.letsencrypt.org/t/enabling-sha256-subject-key-identifiers-for-end-entity-certificates/211453).

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.