{"id":6424,"date":"2020-08-10T13:55:41","date_gmt":"2020-08-10T19:55:41","guid":{"rendered":"http:\/\/gregsowell.com\/?p=6424"},"modified":"2020-08-10T13:55:41","modified_gmt":"2020-08-10T19:55:41","slug":"centos-8-curl-60-ssl-certificate-problem-ee-certificate-key-too-weak","status":"publish","type":"post","link":"https:\/\/gregsowell.com\/?p=6424","title":{"rendered":"Centos 8 curl: (60) SSL certificate problem: EE certificate key too weak"},"content":{"rendered":"<p>When trying to hit the Rest API in a Yealink phone I was getting the following from cURL:<\/p>\n<pre class=\"gs-code\"><code class=\"language-plaintext\">curl: (60) SSL certificate problem: EE certificate key too weak<\/code><\/pre>\n<p>Turns out this is a good thing as it is the system killing old ciphers.  To get <a href=\"https:\/\/access.redhat.com\/documentation\/en-us\/red_hat_enterprise_linux\/8\/html\/security_hardening\/using-the-system-wide-cryptographic-policies_security-hardening\">Centos8 to accept legacy protocols <\/a>it&#8217;s a simple command and a reboot:<\/p>\n<pre class=\"gs-code\"><code class=\"language-plaintext\">$ update-crypto-policies --show\r\nDEFAULT\r\n# update-crypto-policies --set LEGACY\r\nSetting system policy to LEGACY<\/code><\/pre>\n<p>After this you can reboot, then the old API is all yours \ud83d\ude42  Obviously this isn&#8217;t ideal behavior, but for the sake of my testing it did the trick.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>When trying to hit the Rest API in a Yealink phone I was getting the following from cURL: curl: (60) SSL certificate problem: EE\u2026<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14,13],"tags":[],"class_list":["post-6424","post","type-post","status-publish","format-standard","hentry","category-linux","category-server"],"_links":{"self":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/6424","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6424"}],"version-history":[{"count":1,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/6424\/revisions"}],"predecessor-version":[{"id":6425,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/6424\/revisions\/6425"}],"wp:attachment":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6424"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}