RE: OCSP response signature algorithm

["paul h. roubekas" <paul@xxxxxxxxxxxx>]

unsubscribe openssl-users

 

 

From: openssl-users <openssl-users-bounces@xxxxxxxxxxx> On Behalf Of John Jiang
Sent: Friday, July 3, 2020 12:19 PM
To: openssl-users <openssl-users@xxxxxxxxxxx>
Subject: OCSP response signature algorithm

 

Hi,

I'm using OpenSSL 1.1.1.

 

Can I configure the OCSP response signature algorithm?

For a RSA issuer, it looks SHA256withRSA always be selected.

 

PreferredSignatureAlgorithms extension in OCSP request may affect this algorithm in OpenSSL OCSP response. However, I prefer to use configuration.

 

Thanks!