마이크로소프트가 2017년 2월 14일부터 SHA1로 발급된 SSL 인증서를 거절합니다.
Effective February 14, 2017, Windows (version 7 and higher) and Windows Server will no longer trust new code that is signed with a SHA-1 code signing certificate for Mark-of-the-Web related scenarios (e.g. files containing a digital signature) and that has been time-stamped with a value greater than February 14, 2017. This cut-off date applies to the code-signing certificate itself. This restriction will not apply to the time-stamp certificate used to time-stamp the code-signing certificate or the certificate’s signature hash (thumbprint) until February 14, 2017. After this time, Windows will treat any code with a SHA-1 time-stamp or SHA-1 signature hash (thumbprint) as if the code did not have a time-stamp signature. Drivers with signatures verified by Code Integrity are not affected by this change. For more information about how to conform to the latest requirements for driver signing, see the Windows Hardware Certification Blog . |
SSL 인증서 만료일 전에 SHA-2로 변경이 필요합니다.
끝.
