ASA only supports MD5. So my thought based on this is to provide support for various applications.
Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Managing Partner / Sr. Instructor - IPexpert, Inc. Mailto: <mailto:[email protected]> [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: <http://www.ipexpert.com/chat> www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at <http://www.ipexpert.com/communities> www.ipexpert.com/communities and our public website at <http://www.ipexpert.com/> www.ipexpert.com From: [email protected] [mailto:[email protected]] On Behalf Of Kingsley Charles Sent: Wednesday, January 05, 2011 5:24 PM To: kamran shakil Cc: [email protected] Subject: Re: [OSL | CCIE_Security] fingerprints - question in PKI VPNs.. SHA and MD5 are two most used hashing algorithms. IOS sends by default which can't be changed. May they are sent for the user choice of verification. Not sure, let's wait for other's inputs. With regards Kings On Wed, Jan 5, 2011 at 3:50 PM, kamran shakil <[email protected]> wrote: Dears, I saw it many times while i doing labs whenever i enroll and authenticate the cert from CA , i get 2 messages. fingerprint MD5 fingerprint SHA Why TWO / BOTH of them are generated with keys ? I dont think i mentioned it in CA Config ? I didnt see any comment or clue on it in any of the worbooks i have nor on any forums . Well, please let us all know if someone has clue on it . Waiting regards, Kamran ~ _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
