Re: Generate a digital certificate signing request hashed with SHA256

Paul,

What OS level are you at in trying to do this.

I know with SHA256 IBM was a little behind in offering this, and even
importing CAs required a host of PTFs. If you're on anything older than
V6R1 you'll probably be out of luck.

If you are on V6R1 or higher, I would call IBM support and ask what you
need to get it to work.

Brad
www.bvstools.com

On Mon, Oct 27, 2014 at 11:27 AM, <paul.roy@xxxxxxx> wrote:

Hi,

I have been able to install several web sites with HTTPS, but I am stuck
now with a new requirement of the security department of the company.
Usually, I have used DCM to generate the CSR (Certificate Signature
Request) , send it and the I received the signed certificate back for
import....

Now the security department refuses the CSR because the signature
algorithm SHA1 is deprecated and they require it to be at least SHA256.
I could not find any option in the DCM or in the API .

Does anybody know a way to issue the CSR with the required SHA256
algorithm ?

thank you,
Paul
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.