topic RE: browser end of SHA1 support in ExtremeCloud IQ- Site Engine Management Center

browser end of SHA1 support

Ronald_Dvorak — Wed, 21 Dec 2016 03:29:00 GMT

As far as I've read a lot of browser will end the support for SHA1 certifcates next year.

Is there a official document / warning which products are affected and how to generate SHA2 certificates.

I.e. how could I change the factory installed self signed certificate on ExtremeWireless.
I know I'd generate a cert signing request and generate one from my CA but what about small installations without a CA - how could I generate a new self signed cert on the controller with SHA2.

-Ron

RE: browser end of SHA1 support

Ryan_Yacobucci — Wed, 21 Dec 2016 03:37:00 GMT

Hey Ronald,

I know that this has been fixed in the 7.x version of code for NAC. New deployments on 7.0 will have SHA256 certificates for captive portal, RADIUS, and Internal Communications. Not sure, if this has been fixed for wireless but NAC should be unaffected by SHA1 deprecation.

If you installed NAC when it was issuing SHA1 certificates they can be easily regenerated.

Thanks
-Ryan

RE: browser end of SHA1 support

M_Nees — Thu, 19 Jan 2017 01:17:00 GMT

Hi,

these days i have a customer who wants to know if he can change SHA1 / AES Encryption for SNMPV3 into SHA2 / AES 128 ?!

Is supporting SHA2 snmp encrpytion a current topic on Extreme stuff (wireless controller or EOS or EXOS switches). Is this expected in the near future ?

Regards

RE: browser end of SHA1 support

M_Nees — Thu, 19 Jan 2017 01:17:00 GMT

There is also a RFC which specify the demand:
https://tools.ietf.org/html/rfc7630