I am confusing regarding SHA-1 deprecation.
We use self-signed certificates signed with SHA1 and the expiration is after 1 January 2017.
According to this blog: http://blogs.technet.com/b/pki/archive/2013/11/12/sha1-deprecation-policy.aspx
CAs must stop issuing new SHA1 by 1 January 2016. … For SSL certificates, Windows will stop accepting SHA1 end-entity certificates by 1 January 2017. This means any time valid SHA1 SSL certificates must be replaced with a SHA2 equivalent by 1 January 2017.
Will our self-signed certificates stop to work on 1 January 2016 or stop to work on 1 January 2017?
Just to clarify: If I will issue self-signed certificates signed with SHA1 after 1 Jan 2016 it will not accepted by browsers. Correct?
I can work with self-signed certificates. Browsers warn about trust problem but allow me to connect (see images below).
Question if we will issue self-signed certificates signed with SHA1 after 1 Jan 2016 will it continue to work on the same way?