cloudflare / cloudflare/cfssl

Generating SHA256 cert from SHA512 intermediate

Open
#1,005 1 comment 2 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
9.5k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

We need to create a SHA256 hashed certificate from an intermediate SHA512 hashed cert. We use RSA and if we specify KeySize 2048 our cert is RSA(2048) and signed with SHA512.
As I understand this from csr.go:
`case kr.Size() >= 2048:
return x509.SHA256WithRSA`
It should be specified to use SHA256.

Is there a way to force the signing algorithm?

Contributor guide

Open the contributing guide

Research direction

Start with the algorithm-selection logic in csr.go, especially the RSA key-size case shown in the issue. Determine how certificate signing algorithms are currently selected and whether the requested SHA256 choice can be exposed; done when the supported behavior for RSA certificates is clear and covered by the relevant tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cryptography
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.