micromdm / scep

Go SCEP server
MIT License
310 stars 121 forks source link

Tests fail with Go 1.18 due to denial of SHA1 certificates #187

Open jawn-smith opened 2 years ago

jawn-smith commented 2 years ago

Per the Go 1.18 release notes: "crypto/x509 will now reject certificates signed with the SHA-1 hash function. This doesn't apply to self-signed root certificates. Practical attacks against SHA-1 have been demonstrated since 2017 and publicly trusted Certificate Authorities have not issued SHA-1 certificates since 2015."

This is causing quite a few of the test cases to fail with Go 1.18.