For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ZacW's avatar
ZacW
Icon for Nimbostratus rankNimbostratus
Feb 06, 2015

SHA2 Certificate Migration

I am currently in the process of migrating all of my managed SSL certificates from a SHA1 to a SHA2 signing algorithm. Based on other discussions, I'm still unclear on how I should be going about do...
certificate
sha256
ssl
nitass's avatar
nitass
Icon for Employee rankEmployee
Apr 26, 2015

Their concern is that the key is created differently when requesting SHA1 vs SHA2. I'm not sure if that is truly the case which is why I'm asking for clarification.

 

i think it (csr's signature algorithm) does not matter as long as ca signs it using sha2.

 

Are certificate authorities required to obey to the signature algorithm (hashing) specified in the CSR?

 

http://security.stackexchange.com/questions/67180/are-certificate-authorities-required-to-obey-to-the-signature-algorithm-hashing