Re: WEB400 Digest, Vol 12, Issue 104

[paul.roy@xxxxxxx]

We are running IBM i 7.1
I have looked in 7.2 memo to users but did not find anything about that . 

Would it be possible to generate the Certificate on another system and 
then import the certificate with its private key into the DCM ? 

 thank you, 
Paul 




------------------------------

message: 2
date: Mon, 27 Oct 2014 11:35:07 -0500
from: Bradley Stone <bvstone@xxxxxxxxx>
subject: Re: [WEB400] Generate a digital certificate signing request
                 hashed with SHA256

Paul,

What OS level are you at in trying to do this.

I know with SHA256 IBM was a little behind in offering this, and even
importing CAs required a host of PTFs.  If you're on anything older than
V6R1 you'll probably be out of luck.

If you are on V6R1 or higher, I would call IBM support and ask what you
need to get it to work.

Brad
www.bvstools.com

On Mon, Oct 27, 2014 at 11:27 AM, <paul.roy@xxxxxxx> wrote:

> Hi,
>
> I have been able to install several web sites with HTTPS, but I am stuck
> now with a new requirement of the security department of the company.
> Usually, I have used DCM to generate the CSR (Certificate Signature
> Request) , send it and the I received the signed certificate back for
> import....
>
> Now the security department refuses the CSR because the signature
> algorithm SHA1 is deprecated and they require it to be at least SHA256.
> I could not find any option in the DCM or in the API .
>
> Does anybody know a way to issue the CSR with the required SHA256
> algorithm ?
>
> thank you,
> Paul
> --