Skip to content

Commit bd0a064

Browse files
Added warning about SHA1 being used for response signing in ocsp.rst (#10204)
* Update ocsp.rst Added warning about SHA1 being used for sign() * Update ocsp.rst Fixed spelling issues, at least according to en-GB dictionary. * Update ocsp.rst Spell checker didn't catch "algorithim" somehow. * Update ocsp.rst Attempting to rephrase the warning. * Update ocsp.rst Removing rouge space.
1 parent 82f715c commit bd0a064

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

docs/x509/ocsp.rst

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -340,7 +340,11 @@ Creating Responses
340340
:class:`~cryptography.hazmat.primitives.asymmetric.ed448.Ed448PrivateKey`
341341
and an instance of a
342342
:class:`~cryptography.hazmat.primitives.hashes.HashAlgorithm`
343-
otherwise.
343+
otherwise. Please note that
344+
:class:`~cryptography.hazmat.primitives.hashes.SHA1`
345+
can not be used here, regardless of if it was used for
346+
:meth:`~cryptography.x509.ocsp.OCSPResponseBuilder.add_response`
347+
or not.
344348

345349
:returns: A new :class:`~cryptography.x509.ocsp.OCSPResponse`.
346350

0 commit comments

Comments
 (0)