Skip to content

import sha512 to make sha512 ssl certs work#5600

Merged
vieux merged 1 commit intomoby:masterfrom
unclejack:sha512_registry_support
May 5, 2014
Merged

import sha512 to make sha512 ssl certs work#5600
vieux merged 1 commit intomoby:masterfrom
unclejack:sha512_registry_support

Conversation

@unclejack
Copy link
Copy Markdown
Contributor

This tiny PR makes Docker work with private registries which use SSL certs which use sha512 for hashing.

Fixes #5173.

Docker-DCO-1.1-Signed-off-by: Cristian Staretu <[email protected]> (github: unclejack)
@crosbymichael
Copy link
Copy Markdown
Contributor

LGTM

@vieux
Copy link
Copy Markdown
Contributor

vieux commented May 5, 2014

ping @samalba @shin-

@samalba
Copy link
Copy Markdown
Contributor

samalba commented May 5, 2014

LGTM

1 similar comment
@vieux
Copy link
Copy Markdown
Contributor

vieux commented May 5, 2014

LGTM

vieux added a commit that referenced this pull request May 5, 2014
import sha512 to make sha512 ssl certs work
@vieux vieux merged commit eadf004 into moby:master May 5, 2014
@devinsba
Copy link
Copy Markdown

devinsba commented May 5, 2014

Awesome, thanks for doing this. I was working on it myself last night but didn't finish before I had to sleep 👍

@unclejack unclejack deleted the sha512_registry_support branch May 6, 2014 07:29
@kennu kennu mentioned this pull request May 7, 2014
@kennu
Copy link
Copy Markdown

kennu commented May 7, 2014

Quick note for reference: Apparently sha384 certificates are also dependent on "import sha512". I'm using PositiveSSL which has:

Signature Algorithm: sha384WithRSAEncryption

And getting this from "docker login":

x509: cannot verify signature: algorithm unimplemented

Go docs say "Package sha512 implements the SHA384 and SHA512 hash algorithms as defined in FIPS 180-2."

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add support for sha512-based x509 certs in docker registry

6 participants