HCL Notes and Domino 9.0 Social Edition Forum - Certificate signature does not match contents

Feb 12, 2014, 6:35 PM

48 Posts

Certificate signature does not match contents

This error can occur if you try to merge an SSL certificate, whose signature is hashed using SHA-256 RSA. Since the certificate is

signed using SHA-256 RSA, the keyring file cannot accept it and an error dialog appears saying that the certificate signature does

not match its contents.

To resolve this issue, create an SSL certificate using SHA-1 hash algorithm, not a SHA-256 hash algorithm.

Also see : http://www-01.ibm.com/support/docview.wss?uid=swg21258098

~Vijay Bubboosibergoden

Feb 13, 2014, 5:28 AM

5 Posts

Solved

Hi Tom, thank you very much, your suggestion to use SHA-1 worked perfectly.

~Mark Elnuskiynds

May 5, 2014, 5:29 PM

1 Posts

Deprecation?

So, what happens once SHA1 is deprecated in its entirety? The deprecation date is 2017-01-01 for Windows to stop accepting SHA1. We're well within the 5-year issuance period and we can't issue updated SHA2 certs to Domino servers? Sounds entirely bad for business to me. Especially on Domino 9.

~Vanessa Minboosiburoden

Oct 21, 2014, 8:17 PM

12 Posts

SHA2 works but TLS for Windows and Unix use tips

I guess in the context of Poodle TLS not SHA-2 is critical, but anyway here is how to get SHA-2 working with Domino 9 without IBM HTTP.

http://www.infoware.com/?p=1592
TLS is NOT SOLVED by this only SHA-2.

For Windows use IHS integration

For unix look at this link http://blog.darrenduke.net/darren/ddbz.nsf/dx/here-is-a-freely-available-vm-to-reverse-proxy-domino-shoot-the-poodle.htm

Regards
Mats