SSL Certificate Signed Using Weak Hashing Algorithm

[Sandeep Kumar Reddy Lingampalli]

Tenable Scan provides the below report but i dont see any certificate with MD2, MD4, MD5, or SHA1. Could you please advise the fix for this case?An SSL certificate in the certificate chain has been signed using a weak hash algorithm.The remote service uses an SSL certificate chain that has been signed using a cryptographically weak hashing algorithm (e.g. MD2, MD4, MD5, or SHA1). These signature algorithms are known to be vulnerable to collision attacks. An attacker can exploit this to generate another certificate with the same digital signature, allowing an attacker to masquerade as the affec

Continue reading...