in openssl.cnf, i've set: [ CA_default ] ... default_md = sha512 ...
for RSA request generation, my certs reqs report: ... message digest is sha512 ... Signature Algorithm: sha1WithRSAEncryption ... for EC request generation, my certs reqport: ... message digest is sha512 ... Signature Algorithm: ecdsa-with-SHA1 ... Where/how are these 'Signature Algorithms' defined? for EC, e.g., I've found only, grep ecdsa-with- ./crypto/objects/objects.txt -B2 !Alias id-ecSigType ansi-X9-62 4 !global X9-62_id-ecSigType 1 : ecdsa-with-SHA1 but not at all certain what that restricts/allows. Is it possible to define other (SHA512, SHA256, etc) SignatureAlgorithms for use? Thanks, Ben ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]