Craig McGregor wrote:

> I expected that when default_md = sha1 that both the thumbprint algorithm AND
> the SignatureAlgorithm with be SHA1. This was not the case.

I will check it again.

> If you look at Massimiliano's certificate in his signed e-mails to this list.
> When viewed with IE or Outlook that they also use md5RSA for the Signature algorithm
> and sha1 for the thumbprint. This sounds like the same behaviour that I have
> described when creating a CA certificate above.

I think Massimiliano use an old OpenCA which use MD5 by default for the 
usercertificates too.

Michael
-- 
-------------------------------------------------------------------
Michael Bell                   Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter     Email:  [EMAIL PROTECTED]
Humboldt-University of Berlin  Tel.: +49 (0)30-2093 2482
Unter den Linden 6             Fax:  +49 (0)30-2093 2959
10099 Berlin
Germany                                       http://www.openca.org



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to