<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>
<div>Having read that stuff I wonder what action is required (if any) ... the old certificate is (in our case) valid until May 2015,</div>
<div>when I renew a bit earlier (say, in March 2015) is there everything OK?</div>
<div> </div>
<div>--Jörg Knappen</div>
<div> </div>
<div>P.S. @Daniel Security is (unfortunately) never once and for all. Some day, SHA-256 will become vulnerable and we will see a replacement (hopefully ... when there are commercial quantum computers available, all classical security is probably void and we'll need quantum security)</div>
<div>
<div name="quote" style="margin:10px 5px 5px 10px; padding: 10px 0 10px 10px; border-left:2px solid #C3D9E5; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="margin:0 0 10px 0;"><b>Gesendet:</b> Donnerstag, 18. September 2014 um 14:15 Uhr<br/>
<b>Von:</b> "Daniël de Kok" <me@danieldk.eu><br/>
<b>An:</b> "Jörg Knappen" <jknappen@web.de><br/>
<b>Cc:</b> "Oliver Schonefeld" <schonefeld@ids-mannheim.de>, CLARIN-D-Entwicklergruppe <clarind-devel@mailman.sfs.uni-tuebingen.de>, dev@lists.clarin.eu<br/>
<b>Betreff:</b> Re: [Clarind-devel] HEADS UP: Google Chrome is "Gradually sunsetting SHA-1" SSL certificates</div>
<div name="quoted-content">On Thu, Sep 18, 2014 at 2:09 PM, "Jörg Knappen" <jknappen@web.de> wrote:<br/>
> I performed that check and our certificates are affected from the start at<br/>
> DFN (and so will be probably<br/>
> all certificates using the DFN AAI issued before a certain date).<br/>
<br/>
Relevant info from the DFN (probably from before Google's announcement):<br/>
<br/>
<a href="https://www.pki.dfn.de/faqpki/faqpki-sha2/" target="_blank">https://www.pki.dfn.de/faqpki/faqpki-sha2/</a><br/>
<br/>
> Sigh .... more work to do ....<br/>
<br/>
I don't envy the CAs ;). Though one wonders why Heartbleed wasn't used<br/>
as an opportunity by T-Systems or the DFN to fix this once and for<br/>
all. Oh, well...<br/>
<br/>
Take care,<br/>
Daniël</div>
</div>
</div>
</div></div></body></html>