topic Re: Does ACE service module support SHA2(256) certificates in Application Networking

Does ACE service module support SHA2(256) certificates

guilty_2 — Thu, 02 Sep 2010 13:39:17 GMT

Hello,

Does anyone know if ACE service module support SHA2(256) certificates? I see that private key generation defaults to SHA1 and does not provide any option, also the cipher suites in SSL parameters map do not show SHA2 options. Can it handle SHA2 in any software release? I am currently running A2(2.3) build 3.00

Re: Does ACE service module support SHA2(256) certificates

litrenta — Thu, 02 Sep 2010 18:37:22 GMT

Not supported on ACE. There are plans for SHA2 support specifically for

verification of certificates signed with SHA2 family algorithms (SHA224
through 512) on the ACE 30 module coming out later this year. This will not be supported on current ACE modules.

Re: Does ACE service module support SHA2(256) certificates

guilty_2 — Fri, 03 Sep 2010 06:15:03 GMT

hmmm...thats not very encouraging. I expected that it would at least be supported in software. Thanks for replying

Re: Does ACE service module support SHA2(256) certificates

guilty_2 — Fri, 03 Sep 2010 09:38:47 GMT

Just received a reply on my TAC:

SHA-2 support will not be added to either of the A2 or A3 code trains.
However,
In the next release (4.x) release we will be adding SHA2 support
specifically for verification of certificates signed with SHA2 family
algorithms (SHA224 through 512). The current ETA for this code version
is Q4CY 2010 (ie: between now and Christmas).

Re: Does ACE service module support SHA2(256) certificates

litrenta — Fri, 03 Sep 2010 11:58:05 GMT

correct note that 4.x software will not run on the current ace modules, only on the new

ACE 30 modules coming out at the same time, and on the existing ACE appliance.

Does ACE service module support SHA2(256) certificates

paulgilbody — Mon, 14 Nov 2011 15:46:45 GMT

I can't find any updates on this - can someone advise if the ACE 4710 can or will support SHA-2 now or in the near future? Specifically SHA-512?

Thanks

Does ACE service module support SHA2(256) certificates

litrenta — Mon, 14 Nov 2011 19:17:24 GMT

ACE 4710 running A4 code supports sha-512 for verification of certs signed with this algorithm. It does not support negotiation of sha-2 cipher specs in ssl termination.