Re: [REGRESSION] Re: [PATCH] crypto: pkcs7: remove sha1 support

Michael Yartys
2024-03-13T18:39:59Z

Hi

This came in via the iwd mailing list, and I would like to add some small a detail as I also experience this issue on my university eduroam network. I've verified that the certificate chain doesn't contain SHA-1 signed certificates, so the update breaks more than just SHA-1.

Michael

On Wednesday, March 13th, 2024 at 09:56, Johannes Berg <johannes@sipsolutions.net> wrote:

>
>
> Not sure why you're CC'ing the world, but I guess adding a few more
> doesn't hurt ...
>
> On Wed, 2024-03-13 at 09:50 +0100, Karel Balej wrote:
>
> > and I use iwd
>
>
> This is your problem, the wireless stack in the kernel doesn't use any
> kernel crypto code for 802.1X.
>
> I suppose iwd wants to use the kernel infrastructure but has no
> fallbacks to other implementations.
>
> johannes