Git-Mirrors/RetroShare
1
0
Fork 0
mirror of https://github.com/RetroShare/RetroShare.git synced 2025-03-03 12:19:31 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #2911 from csoler/v0.6-RNP-submodule

Browse Source 
added non-backward compatible flag change for v0.7 about sha1 certs
This commit is contained in:
csoler 2025-01-12 14:12:36 +01:00 committed by GitHub
commit 4b5dd51681
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
retroshare.pri
View File

@ -286,7 +286,7 @@ isEmpty(RS_THREAD_LIB):RS_THREAD_LIB = pthread
# #
# V07_NON_BACKWARD_COMPATIBLE_CHANGE_002: # V07_NON_BACKWARD_COMPATIBLE_CHANGE_002:
# #
# What: Use RSA+SHA256 instead of RSA+SHA1 for PGP certificate signatures # What: Use RSA+SHA256 instead of RSA+SHA1 for SSL certificates
# #
# Why: Sha1 is likely to be prone to primary collisions anytime soon, so it is urgent to turn to a more secure solution. # Why: Sha1 is likely to be prone to primary collisions anytime soon, so it is urgent to turn to a more secure solution.
# #
@ -296,16 +296,26 @@ isEmpty(RS_THREAD_LIB):RS_THREAD_LIB = pthread
# #
# What: Do not hash PGP certificate twice when signing # What: Do not hash PGP certificate twice when signing
# #
# Why: hasing twice is not per se a security issue, but it makes it harder to change the settings for hashing. # Why: hasing twice is not per se a security issue, but it makes it harder to change the settings for hashing.
# #
# Backward compat: patched peers cannot connect to non patched peers older than Nov 2017. # Backward compat: patched peers cannot connect to non patched peers older than Nov 2017.
# #
# V07_NON_BACKWARD_COMPATIBLE_CHANGE_004: # V07_NON_BACKWARD_COMPATIBLE_CHANGE_004:
# #
# What: Do not probe that GXS tunnels accept fast items. Just assume they do. # What: Do not probe that GXS tunnels accept fast items. Just assume they do.
#
# Why: Avoids sending probe packets # Why: Avoids sending probe packets
#
# BackwardCompat: old RS before Mai 2019 will not be able to distant chat. # BackwardCompat: old RS before Mai 2019 will not be able to distant chat.
# #
# V07_NON_BACKWARD_COMPATIBLE_CHANGE_005:
#
# What: Stop accepting certificates signed with sha1 algorithm
#
# Why: Sha1 has been declared insecure and shouldn't be used anymore.
#
# BackwardCompat: Retroshare profiles generated before Nov.2024 with openpgp-sdk may still use sha1
#
########################################################################################################################################################### ###########################################################################################################################################################
########################################################################################################################################################### ###########################################################################################################################################################