Skip to main content

Important: Move from MD5 VPN Certificates to supported alternatives

Updated
This article applies only to On-Premise Appliance, not to our Cloud products.

 

Smoothwall no longer supports MD5, a legacy hashing algorithm used to sign VPN certificates.

From the Leeds-5 update, you can’t create new VPN certificates using MD5. Because of this:

  • We don’t provide documentation, training or support for setting up or managing MD5 VPN certificates.
  • We can’t guarantee existing MD5 VPN certificates will continue to work. We also won’t fix any product issues related to them.

You can temporarily continue using your existing MD5 VPN certificates. However, you must remove them before you can move to Maiden.

To identify and remove MD5 VPN certificates:

  1. Go to Network > VPN > Certificate authorities. Look for any CAs with an X in the Secure column. Renew or delete them.
  2. Go to Network > VPN > Certificates. Look for any certificates with an X in the Secure column. Renew or delete them.