Skip to content

Build-YubiKeyPIVCertificateSigningRequest not honoring HashAlgorithm #182

@virot

Description

@virot

Version

PS C:\temp\ecc> get-powershellYKInfo | Format-List

YubicoVersion : 1.13.2.0
AutomationVersion : 7.5.0.500
powershellYKVersion : 0.2025.8.1

Issue:

The CSR is built with non specified CSR

Generation

Build-YubiKeyPIVCertificateSigningRequest -Slot 0x9a -Subjectname "CN=Testing ECC - Not to be used" -OutFile \temp\ecc-test-sha256.csr -HashAlgorithm SHA256

Verification

certutil -dump ecc-test-sha256.csr

Signature Algorithm:
    Algorithm ObjectId: 1.2.840.10045.4.3.3 sha384ECDSA
    Algorithm Parameters: NULL

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions