SHA1 is depcrecated as of january 1st this year - at least on browsers. I have not switched my ironport certificate yet, and not my intra exchange certificate (the external ones are replaced). Will I get into trouble january 1st on my intra exchange communication that use TLS / SSL and will I get problems with mail TLS negotiations on my Ironport mx?

  • 4
    What specific problem are you tying to solve? In its current form, your question of s far too broad. Details are needed. – EEAA Dec 23 '16 at 19:54
  • I am wondering If I will get a problem with my services on exchange and ironport the 1st of january if I dont switch to a sha256 certificate (as my current expires in february) – normarth Dec 23 '16 at 19:58
  • 3
    Just get a new certificate. You should have done this long ago anyway. – EEAA Dec 23 '16 at 20:01
  • 3
    Do you want to have an orderly migration, or a 3 am emergency migration? This should have been done months ago; and whether non-browser clients are affected now or not, they will be soon enough. This is not going away if you ignore it long enough. You (and likely many others reading this) have ignored it too long already. – Michael Hampton Dec 23 '16 at 20:25
  • 3
    You probably can get away with waiting until January, assuming your priorities don't get changed from above you. But it's so quick and easy to change certificates that, from the time you began writing this question, you probably could have finished by now. – Michael Hampton Dec 23 '16 at 21:14

You will not run into trouble as you probably have noticed. It is advisable however to upgrade your PKI server so that you can start using SHA2 certificates asap.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.