Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Testing for SHA-2 compatibility on an application

Posted on 2016-09-09
4
Medium Priority
?
153 Views
Last Modified: 2016-09-19
I am in the process of upgrading my SHA1 certificates to SHA-256. Before I do anything I want to check application compatibility with SHA-2. I could just create a new SHA-256 cert and test it out but wanted to see if there is another way?
0
Comment
Question by:YZlat
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 64

Accepted Solution

by:
btan earned 1500 total points
ID: 41792327
If you meant to test your appl for sha2  interoperability, I should say go through the same regime of staging environment and test with your data set as the storage of hash output increased as compared to sha1. This is applicable if your have your DB  storing those output.

In term of performance issue, ther should not be until actual measurements are performed. Hash functions are fast. In most situations, hash function performance has only negligible impact; using the computing hardware these day in even have any detecting of such change could prove difficult. Security must comes first.

Otherwise if it is just upgrade of (let say) SSL cert for web based check and compliant, you can check out ssl test online which covers server and client (browser)
(look at some of the listed toolkit set to check on weak cipher)
https://www.owasp.org/index.php/Testing_for_Weak_SSL/TLS_Ciphers,_Insufficient_Transport_Layer_Protection_(OTG-CRYPST-001)#Testing_for_Weak_SSL.2FTLS_Cipher_Suites.

You can consider iiscrypto tool if you are using Windows. This tool read the Registry and show the cipher used and baseline for the Windows OS platform. See this EE discussion.
https://www.experts-exchange.com/questions/28961303/Enterprise-CA-TLS-1-2-Template.html#a41741956

Testing is rather specific to your use case, you will need to plan out the test instead.
0
 
LVL 35

Author Comment

by:YZlat
ID: 41796759
Actually I was looking to test whether a particular app would work with new SHA-2 certificate
0
 
LVL 64

Assisted Solution

by:btan
btan earned 1500 total points
ID: 41797090
You can access the service with the certificate replaced. The tool will ensure the certificate binded to your service is as expected.
0
 
LVL 35

Author Closing Comment

by:YZlat
ID: 41805408
Thanks for some useful info
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The recent Petya-like ransomware attack served a big blow to hundreds of banks, corporations and government offices The Acronis blog takes a closer look at this damaging worm to see what’s behind it – and offers up tips on how you can safeguard your…
What we learned in Webroot's webinar on multi-vector protection.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video Micro Tutorial shows how to password-protect PDF files with free software. Many software products can do this, such as Adobe Acrobat (but not Adobe Reader), Nuance PaperPort, and Nuance Power PDF, but they are not free products. This vide…

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question