From: Matthias A. <mat...@gm...> - 2005-12-19 10:00:42
|
Jason White <jas...@in...> writes: > On Mon, Dec 19, 2005 at 01:33:33AM +0100, Matthias Andree wrote: >> >> Thank you. Does it document relevant changes to the x509 command, or >> what does the x509 manual page say WRT the default hash? > > -md2|-md5|-sha1|-mdc2 > the digest to use. This affects any signing or display option that > uses a message digest, such as the -fingerprint, -signkey and -CA > options. If not specified then SHA1 is used. If the key being used > to sign with is a DSA key then this option has no effect: SHA1 is > always used with DSA keys. Makes sense. Thank you! -- Matthias Andree |