On 8/17/12 10:49 AM, Shawn Rahl wrote:
> Also, it seems that the hash output for the umwebCA is not what you 
> are saying it should be:
>
>     [root@molar cosign-ca-dir]# openssl x509 -hash -noout -in
>     ./umwebCA.pem
>     4700e8dd
>

Starting with version 1 of openssl, it uses a different algorithm to 
compute the hash. You can get the old and new values from it:

pgp$ /opt/local/bin/openssl x509 -subject_hash -subject_hash_old -noout 
-in umwebCA.pem
5cc1e784
4700e8dd

-Phil

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Cosign-discuss mailing list
Cosign-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/cosign-discuss

Reply via email to