Allow Apache to use MD5 signed certs in Centos >=6.4.

Centos 6.4 changed the NSS library to reject X.509 certificates which
are signed with MD5:

  "[VALID] The upstream Mozilla NSS disabled support for MD5 hash
   signed certificates in the 3.14 release, which was added to CentOS
   6.4. More details and workarounds can be found in this Fedora bugzilla
   report https://bugzilla.redhat.com/show_bug.cgi?id=895513"

This change can be reverted when the world has changed from MD5 to something else :)
This commit is contained in:
Ossi Herrala 2013-03-09 15:57:45 +00:00
parent f688225735
commit 0548ead8cd

View file

@ -64,7 +64,7 @@ check13 () {
start() {
echo -n $"Starting $prog: "
check13 || exit 1
LANG=$HTTPSD_LANG daemon --pidfile=${pidfile} $httpsd $OPTIONS
NSS_HASH_ALG_SUPPORT=+MD5 LANG=$HTTPSD_LANG daemon --pidfile=${pidfile} $httpsd $OPTIONS
RETVAL=$?
echo
[ $RETVAL = 0 ] && touch ${lockfile}