OpenSSL CSR generation using SHA-2

Submitted by ucaqld on Thu, 11/13/2014 - 01:29 Pro Licensee

With the upcoming versions of Google Chrome planning to issue degraded indicators/warnings for SHA-1 SSL certificates that expire after the 1st of January 2016, we need to be able to generate SHA-2 based SSL certificates by the 1st January 2015. IS there any plans to enable the "Manage SSL Certificate" form inside Virtualmin to select SHA-2 when generating a CSR?

Status: 
Closed (fixed)

Comments

Submitted by JamieCameron on Thu, 11/13/2014 - 19:59

So Virtualmin just uses the openssl req command to generate a private key and cert - so if this switches to SHA-2 certs, Virtualmin will use them as well.

However, it looks like there is a new -sha256 flag that needs to be passed to the openssl command to request an SHA-2 key.

Submitted by ucaqld on Thu, 11/13/2014 - 23:36 Pro Licensee

Yeah that's what we discovered also... Was just wondering if you could expose a tick box in Virtualmin to add that flag to the openssl req command?

Submitted by JamieCameron on Fri, 11/14/2014 - 18:26

I'm implementing this for inclusion in the next release.

Submitted by Issues on Fri, 11/28/2014 - 18:30

Automatically closed -- issue fixed for 2 weeks with no activity.

Submitted by Issues on Fri, 11/28/2014 - 18:30

Automatically closed -- issue fixed for 2 weeks with no activity.