ZLD 5.38

ESupport

Hi,

besides not getting an Emailnotification that the 5.38 is out since first of april i found this section in the changelogs:

[Feature Change]: Not support certificate signed using weak hashing
algorithm (Md5 or SHA1)

Does this also concern the rootcertificates?

kellymiller

For end-entity certificates, always use a stronger algorithm (e.g., SHA-2) for signing.
Regularly update your system’s root certificate store to ensure proper trust validation. I think you can reference https://docs.digicert.com/en/certcentral/certificate-merge fruits-vulnerabilities/weak-hashing-algorithm.html

ESupport

This is exactly why i asked if this is change will also concern Rootcertificates (ie own CA-Certificates). I'd rather not change it on hundreds of computers/phones outside of mdm-capabilities 😉