[Mono-list] Regarding - SHA-2 supported version in mono

[Kaushik Velusamy]

Hi,

I have a query regarding SHA-2 supported version in mono.

Novell iFloder ( On OpenEnterpriseServer11SP3) which runs on SLES11SP3 ran
into an issue because of SHA2 certificates. eDirectory has moved to SHA-2
certificates and hence all components of OES needs to be compatible.
However iFloder is having issue since MONO that is part of SLES11SP3 (
*mono-core-2.6.7-0.9.1.x86_64.rpm*) does not support SHA-2.

I tried in mono-3.6 as well.

*Could you tell me which is the supported mono version for SHA-2?*



Error log:

Installing certificate...ERROR building certificate chain:
System.ArgumentException: certificate --->
System.Security.Cryptography.CryptographicException: *Unsupported hash
algorithm: 1.2.840.113549.1.1.11*
at Mono.Security.X509.X509Certificate.VerifySignature
(System.Security.Cryptography.RSA rsa) [0x00000] in <filename unknown>:0
at Mono.Security.X509.X509Certificate.VerifySignature
(System.Security.Cryptography.AsymmetricAlgorithm aa) [0x00000] in
<filename unknown>:0
at System.Security.Cryptography.X509Certificates.X509Chain.IsSignedWith
(System.Security.Cryptography.X509Certificates.X509Certificate2 signed,
System.Security.Cryptography.AsymmetricAlgorithm pubkey) [0x00000] in
<filename unknown>:0
at System.Security.Cryptography.X509Certificates.X509Chain.Process (Int32
n) [0x00000] in <filename unknown>:0
at System.Security.Cryptography.X509Certificates.X509Chain.ValidateChain
(X509ChainStatusFlags flag) [0x00000] in <filename unknown>:0
at System.Security.Cryptography.X509Certificates.X509Chain.Build
(System.Security.Cryptography.X509Certificates.X509Certificate2
certificate) [0x00000] in <filename unknown>:0
--- End of inner exception stack trace ---
at System.Security.Cryptography.X509Certificates.X509Chain.Build
(System.Security.Cryptography.X509Certificates.X509Certificate2
certificate) [0x00000] in <filename unknown>:0
at System.Net.ServicePointManager+ChainValidationHelper.ValidateChain
(Mono.Security.X509.X509CertificateCollection certs) [0x00000] in <filename
unknown>:0

-----------------------------------------------------------
Regards,
Kaushik Velusamy,
Software Engineer - Team FNS
Novell Software Development(I) Pvt Ltd
Bangalore
---------------
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ximian.com/pipermail/mono-list/attachments/20151130/80cc868a/attachment-0001.html>