Use a SHA-256 signature for the client certificate to fix TLS on Buster

moonlight-stream / moonlight-embedded

Gamestream client for embedded systems

https://github.com/moonlight-stream/moonlight-embedded/wiki

GNU General Public License v3.0

1.49k stars 324 forks source link

Use a SHA-256 signature for the client certificate to fix TLS on Buster #755

Closed cgutman closed 5 years ago

cgutman commented 5 years ago

Description SHA-1 signed certificates have been phased out by CA and SSL client implementations. On Debian Buster, the default OpenSSL policy rejects SHA-1 certificates and prevents Moonlight from working.

Purpose Stop generating new SHA-1 client certificates to fix pairing and streaming on Debian/Raspbian Buster with the default OpenSSL config.

Fixes #754