Hi,

I am trying to generate ecdsa signed certificate with sha-2 but facing
issues (via cli). openssl uses sha-1 as default hashing algorithm and does
not recognize sha-2 algorithms. I even tried with md5 but no success.  I am
using 0.9.8k version. Below are the steps I am following. Can someone please
shed some light on this... Is it a known bug ? Is it fixed in 1.0.0 beta
version ?


1. Generating curve parameters

openssl ecparam -out ec_param.pem -name prime256v1 -genkey

2) Generate certificate (self signed)



openssl req -new -x509 -key ec_param.pem -sha256 -out testcert123.pem



After this when I display cert it still shows sha-1. How do I use sha-2
algorithm. I also tried it with md5 but still it always uses sha-1 for
hashing



Can you please let me know how do I specify sha-2 for hashing



Thanks,

Kunal

Reply via email to