Hi,

you can simply change the openssl's configurations in order to use sha256
instead of sha1. The simplest way is to do a blind substitution:

        $ cd OPENCA/etc/openssl/openssl/
        $ for i in *.template ; do cp "$i" "$i.bak" ; \
                cat "$i.bak" | sed "s|sha1|sha256|" > $i; done

and, of course, you have to change the main config file as well, which
is OPENCA/etc/openssl/openssl.cnf.template. Now restart openca.

Later,
Max


Yildirim Zaynal wrote:
Hello OpenCA users,

I am new to the mailing list, I have studied the faqs and manuals of
the OpenCA and according to the manual i can choose from crypt, sha-1
or MD5 digests for the internal database. I am interested in the
SHA-256.. Is this not supported yet by the current OpenCA application?

If not i am forced to use SHA-1.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to