Operator generates truststore from certs using outdated algorithms

infinispan / infinispan-operator

Infinispan Operator

https://infinispan.org/docs/infinispan-operator/main/operator.html

Apache License 2.0

48 stars 54 forks source link

Operator generates truststore from certs using outdated algorithms #2066

Closed Crumby closed 5 months ago

Crumby commented 5 months ago

SSLMate go-pkcs12 utility at version 0.2.0 is using pbeWithSHA1And40BitRC2-CBC encryption for the truststore which is considered outdated and weak for modern standards. It also doesn't allow for this feature to be used in FIPS enabled environment.

0.4.0 version added option to use modern encryption standards that work on FIPS enabled environments.