On Mon, Jul 02, 2012, Erwann Abalea wrote:

> Bonjour,
> 
> Le 02/07/2012 16:05, Mathias Tausig a écrit :
> >Which padding method does openssl use, when I sign a certificate with
> >the 'ca' command (using an RSA key)?
> 
> RSA PKCS#1v1.5
> 
> >Is there a way to change it?
> 
> I don't think so.
> 

In openssl 1.0.1 and later you can use the -sigopt to change the signature
format used. It currently supports PKCS#1 v1.5 and PSS.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to