Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

When creating the CSR and sending it to Verisgn got this warning:

"Alert: Your CSR has been signed using the MD5 hashing algorithm. While the MD5 hashing algorithm is not optimal it will not prevent you from using this CSR to enroll for your SSL certificate. VeriSign best practices recommend that you use a different hashing algorithm for the signature. CSR Information"

I created the private key using this:
openssl genrsa -out /etc/ssl/private/server.key 2048
Then the CSR using this:
openssl req -new -key server.key -out domain.server.csr


What am I supposted to be doing different in this case?

share|improve this question

1 Answer 1

Just add -sha1 or -sha256 to the end of your request command to specify which message digest algorithm to use. See OpenSSL's Documentation for a list of valid signing algorithms.

For example (SHA-1):

openssl req -new -key server.key -out www.domain.server.csr -sha1

OR (SHA-256):

openssl req -new -key server.key -out www.domain.server.csr -sha256
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.