15 May
2026
15 May
'26
4:02 a.m.
steiner@rutgers.edu wrote:
I think this is a cipher issue but not sure what's the best way to fix it. Here's the relevant parts of the debug log:
and if you look at the certs, in the old one I see
Signature Algorithm: sha384WithRSAEncryption
and the new one (just a renewal) is
Signature Algorithm: sha256WithRSAEncryption
Did you set an SSF based on the older cert, and the new one isn't "strong" enough?
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/