Re: Generate a digital certificate signing request hashed with SHA256

[Bradley Stone <bvstone@xxxxxxxxx>]

Paul,

What OS level are you at in trying to do this.

I know with SHA256 IBM was a little behind in offering this, and even
importing CAs required a host of PTFs.  If you're on anything older than
V6R1 you'll probably be out of luck.

If you are on V6R1 or higher, I would call IBM support and ask what you
need to get it to work.

Brad
www.bvstools.com

On Mon, Oct 27, 2014 at 11:27 AM, <paul.roy@xxxxxxx> wrote:

> Hi,
>
> I have been able to install several web sites with HTTPS, but I am stuck
> now with a new requirement of the security department of the company.
> Usually, I have used DCM to generate the CSR (Certificate Signature
> Request) , send it and the I received the signed certificate back for
> import....
>
> Now the security department refuses the CSR because the signature
> algorithm SHA1 is deprecated and they require it to be at least SHA256.
> I could not find any option in the DCM or in the API .
>
> Does anybody know a way to issue the CSR with the required SHA256
> algorithm ?
>
> thank you,
> Paul
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: WEB400@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/web400.