Tuesday, January 7, 2014

OSG PKI Update to SHA-2 Now February 11th, 2014

The OSG PKI has delayed its start date for issuing SHA-2 signed certificates from January 14th, 2014 to February 11th, 2014. On February 11th all newly issued certificates will be signed with the new SHA-2 hash algorithm. To be fully compliant in all packages OSG resources will need to be updated to OSG 3.1.22 or greater. Release 3.1.22 has been available since August, 2013. A full table of packages and the OSG version they are compliant at is available at https://www.opensciencegrid.org/bin/view/Documentation/Release3/SHA2Compliance. It is very important that you review this list and determine if commonly used software at your site needs to be updated.

The OSG Production and Software Teams are available to answer your questions regarding the SHA-2 update. Please open a ticket at http://ticket.grid.iu.edu/goc/submit if you have any questions or need assistance.