Generating SHA256 cert from SHA512 intermediate
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
We need to create a SHA256 hashed certificate from an intermediate SHA512 hashed cert. We use RSA and if we specify KeySize 2048 our cert is RSA(2048) and signed with SHA512.
As I understand this from csr.go:
`case kr.Size() >= 2048:
return x509.SHA256WithRSA`
It should be specified to use SHA256.
Is there a way to force the signing algorithm?
Contributor guide
Research direction
Start with the algorithm-selection logic in csr.go, especially the RSA key-size case shown in the issue. Determine how certificate signing algorithms are currently selected and whether the requested SHA256 choice can be exposed; done when the supported behavior for RSA certificates is clear and covered by the relevant tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- cryptography
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100