[strongSwan] [Strongswan]expected hash algorithm HASH_SHA1, but found HASH_SHA256 error

Martin Willi martin at strongswan.org
Wed Aug 22 08:59:10 CEST 2012


Hi,

> 08[LIB] expected hash algorithm HASH_SHA1, but found HASH_SHA256 (OID:
> 30:0d:06:09:60:86:48:01:65:03:04:02:01:05:00)

Your certificate looks bogus. The certificate itself says (in the X.509
encoding) it is signed by the CA using SHA1, but the PKCS#1 signature
contains an OID for SHA256. Because of this inconsistency, the
certificate is rejected.

Regards
Martin





More information about the Users mailing list