dynaTrace 5.6 - weak cert question
Hi everyone,
We are planning a dynaTrace upgrade from 4.2 to 5.6.
I've read the known issues in dynaTrace 5.6, and one thing is not clear:
Java 7 does not accept weak certificates by default. This might lead to refused connections e.g. when authenticating to a secure LDAP server with a weak certificate.
Is this saying that if we're using LDAP for dyna users/groups (we do), there is a chance we'll face this refused connection problem after upgrade?
And by certificate, it mean SSL certificate, right? If yes, how can i decide if a certificate is weak, or not?
In our dynaTrace server settings under Users -> LDAP, the "Use SSL connection" checkbox is NOT checked, so we're not using secure connection to the LDAP server, and therefore we won't face this issue, am i right?
Thank you in advance!
Best regards,
Tamás Vincze
Hello Tamás,
Java 7 does not accept weak certificates (i.e. certificates using weak hashing or signing algorithms, for instance MD2 or an RSA key of size < 1024) by default. This might lead to refused connections e.g. when authenticating to a secure LDAP server with a weak certificate.
Does this answer your question?
Kurt
