in openssl.cnf, i've set:

        [ CA_default ]
        ...
        default_md = sha512
        ...

for RSA request generation, my certs reqs report:

        ...
        message digest is sha512
        ...
        Signature Algorithm: sha1WithRSAEncryption
        ...

for EC request generation, my certs reqport:

        ...
        message digest is sha512
        ...
        Signature Algorithm: ecdsa-with-SHA1
        ...

Where/how are these 'Signature Algorithms' defined?

for EC, e.g., I've found only,

        grep ecdsa-with- ./crypto/objects/objects.txt -B2
                !Alias id-ecSigType ansi-X9-62 4
                !global
                X9-62_id-ecSigType 1            : ecdsa-with-SHA1

but not at all certain what that restricts/allows.

Is it possible to define other (SHA512, SHA256, etc)
SignatureAlgorithms for use?

Thanks,

Ben
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to