Re: [squid-users] TR: [Bulk] Re: [squid-users] Certificate Validation problem due to Sha 256 message digest

On Fri, 2008-12-12 at 14:53 +0100, Raphael wrote:

> I use Openssl 0.9.8i which manages to check the certificate. I am also able
> to get the sha256 digest of a file :
> openssl dgst -sha256 /root/openssl-0.9.8i.tar.gz
> is working and giving me the message digest.

That's fine. But the digest algoritm also needs to be in the cipher
suite profile. In the normal openssl cipher suite for SSL only SHA1 is
included.

I don't know if OpenSSL supports SHA2 in the cipher suites. It does not
look like it from a quick glance (see openssl ciphers command). (0.9.8g)

Regards
Henrik
Received on Sat Dec 13 2008 - 23:23:33 MST