Tentacle Certificate Signature Algorithms

Octopus Server
, , ,
1

We generated a fail with Nessus scanner on the tentacle certificate. What can we do to regenerate this with a stronger signature algorithm?
image

3

Hi @nbraasch!

You can use the new-certificate command to register a new certificate, which should be SHA256RSA, assuming you’re using a recent tentacle version on the machine.

As we don’t regenerate the certificates after install time, you’re using a certificate that was there from your initial tentacle install, and at that time we used SHA-1.

I hope this helps, and please don’t hesitate to reach out if you have any further questions.

4

Thanks - if I re-gen the cert, will I need to re-register with the server?

5

You should just be able to update the thumbprint in Infrastructure -> Deployment Targets -> the tentacle.

Listening%20Thumbprint
Listening Thumbprint.png963×237 14.6 KB