Skip to main content

Signature algorithms

The signature algorithm defines the hash and signature algorithms the issuing CA certificate (Intermediate CA or Root CA) can use to sign a certificate request. You must specify a default signature algorithm from the list of allowed algorithms in case the certificate request does not specify what signature algorithm should be used.

JSON structure example

CASD.ECKA and OCE.ECKA

"signature_algorithm": {
    "allowed_algorithms": [
      "sha256WithECDSA",
      "sha384WithECDSA",
      "sha512WithECDSA"
    ],
    "default_algorithm": "sha256WithECDSA"
}

CASD.CT/AUT

"signature_algorithm": {
    "allowed_algorithms": [
      "sha256WithRSA",
      "sha384WithRSA",
      "sha512WithRSA"
    ],
    "default_algorithm": "sha256WithRSA"
},

Parameters

表 1. Parameters - Signature algorithms

Name

Type

Required/optional

Possible values

allowed_algorithms

Array of string

Required

Specifies the signature algorithms that can be used to sign certificate requests: Supported values include:

CASD.ECKA and OCE.ECKA Algorithms:

  • sha256WithECDSA

  • sha384WithECDSA

  • sha512WithECDSA

CASD.CT/AUT Algorithms:

  • sha256WithRSA

  • sha384WithRSA

  • sha512WithRSA

default_algorithm

String

Required

Specifies the default signature algorithm. Must be one of the values defined in allowed_algorithms.


本节内容如下: