Aw: Re: Re: Converting a root certificate from md5 to sha1

2014-04-16 Thread steffo76
um 22:28 Uhr Von: "Kyle Hamilton" An: openssl-users Betreff: Re: Re: Converting a root certificate from md5 to sha1 Stephan, It depends on how pedantic your clients are. If you aren't rekeying, it shouldn't matter, though. X.509 has a "Subject" and an "Iss

Re: Re: Converting a root certificate from md5 to sha1

2014-04-15 Thread Kyle Hamilton
Stephan, It depends on how pedantic your clients are. If you aren't rekeying, it shouldn't matter, though. X.509 has a "Subject" and an "Issuer". The Issuer of a certificate is the Subject of the certificate which private key was used to sign it. If the Issuer doesn't change, then the matching

Aw: Re: Converting a root certificate from md5 to sha1

2014-04-15 Thread steffo76
>You need to generate a new certificate with the same data (except a >different serial number and a reference to sha1WithRSAEncryption), >containing the same public key, and signed with the same private key. > >I'd recommend sha256WithRSAEncryption, but that's possibly not an >option for you. > >Ma

Re: Converting a root certificate from md5 to sha1

2014-04-15 Thread Kyle Hamilton
You need to generate a new certificate with the same data (except a different serial number and a reference to sha1WithRSAEncryption), containing the same public key, and signed with the same private key. I'd recommend sha256WithRSAEncryption, but that's possibly not an option for you. Make sure

Re: Converting a root certificate from md5 to sha1

2014-04-15 Thread Hanno Böck
I don't know the answer to your main question, but: On Tue, 15 Apr 2014 10:41:20 +0200 steff...@gmx.de wrote: > I need to change this do sha1 because I have clients that do not > accept md5 anymore. If you use SHA256 you won't have to do this again in a few years. (Microsoft announced to depreca

Converting a root certificate from md5 to sha1

2014-04-15 Thread steffo76
Hello world, I am running my own little CA and the root certificate was created using md5: Signature Algorithm: md5WithRSAEncryption I need to change this do sha1 because I have clients that do not accept md5 anymore. Is there any way to convert the existing cert from md5 to sha1 ? I tried co