Hi Samuel,

just a remember that SHA1 is going to be dismiss in 2010 (FIPS),
therefore my choice of upgrading the default HASH protocol is
dictated by the fact that the sooner we adopt it, the easier
will be when we will have to use it.. so, please, consider to
plan the transition to the new algorithm in time :D Especially
for CA certs this might be a serious issue.

Later,
Max


Samuel Rios Carvalho wrote:
Scott,

You are correct.
I'm using Windows XP SP2, and my root certificate was creating in
SHA256, then I change openssl.conf to SHA1. Work perfect.
thanks


--

Best Regards,

        Massimiliano Pala

--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]  [EMAIL PROTECTED]
                                                 [EMAIL PROTECTED]

Dartmouth Computer Science Dept               Home Phone: +1 (603) 369-9332
PKI/Trust Laboratory                          Work Phone: +1 (603) 646-9179
--o------------------------------------------------------------------------

People who think they know everything are a great annoyance to those of us
who do.
                                                           -- Isaac Asimov

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to