What the impacts of the SHA-1 deprecation will be on internal/intranet self-signed certificates?
Will this impact/stop internal/intranet HTTPS service such as web interfaces?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
As an organization, you typically have control on the policies implemented in your infrastructure, this includes policies governing the behavior of client software regarding certificate handling.
I am assuming you discuss the classic browser - web service relationship. With this in mind, take a look at the two main player's statements on this matter:
Even so, depending on the type/version of your clients, enforcement of bypass policies may be possible. Not that this would be an advisable course of action.
None. Self-signed certificates are by definition not trusted by external CA, so vulnerability which allows one to impersonate CA is meaningless - attacker could just put any fake CA and your clients which ignore CA would trust it... (The same is NOT true if you use your own trusted CA, of course)