Added options for additional hashing algorithms

certnanny · Oct 25, 2020 · 23e306f · 23e306f
1 parent 2edae5e
commit 23e306f
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 1 deletion.
diff --git a/mkrequest b/mkrequest
@@ -157,8 +157,14 @@ subjectAltName=critical,DNS:$PARAMETER
 subjectAltName=critical,email:$PARAMETER
 _EOF_
 
+if [ "$4" ]; then
+	DIGEST=-$4
+else
+	DIGEST=""
+fi
+
 # Make request
-openssl req -new -key $PREFIX.key -out $PREFIX.csr -config $CONFIG \
+openssl req -new -key $PREFIX.key $DIGEST -out $PREFIX.csr -config $CONFIG \
 	-reqexts $EXT
 
 # Make a self-signed certificate from request subject

diff --git a/sscep.c b/sscep.c
@@ -500,6 +500,10 @@ main(int argc, char **argv) {
 		sig_alg = (EVP_MD *)EVP_md5();
 	} else if (!strncmp(S_char, "sha1", 4)) {
 		sig_alg = (EVP_MD *)EVP_sha1();
+	} else if (!strncmp(S_char, "sha256", 6)) {
+		sig_alg = (EVP_MD *)EVP_sha256();
+	} else if (!strncmp(S_char, "sha512", 6)) {
+		sig_alg = (EVP_MD *)EVP_sha512();
 	} else {
 		fprintf(stderr, "%s: unsupported algorithm: %s\n",
 			pname, S_char);
@@ -512,6 +516,10 @@ main(int argc, char **argv) {
 		fp_alg = (EVP_MD *)EVP_md5();
 	} else if (!strncmp(F_char, "sha1", 4)) {
 		fp_alg = (EVP_MD *)EVP_sha1();
+	} else if (!strncmp(F_char, "sha256", 6)) {
+		fp_alg = (EVP_MD *)EVP_sha256();
+	} else if (!strncmp(F_char, "sha512", 6)) {
+		fp_alg = (EVP_MD *)EVP_sha512();
 	} else {
 		fprintf(stderr, "%s: unsupported algorithm: %s\n",
 			pname, F_char);