This certificate has an invalid digital signature - sha224












0















I am using nodejs as https server. and trying to test by uing sha224 as signature digest, BUT I received this error "This certificate has an invalid digital signature" and unable to access to my website.
tried sha256/sha384/sha512, they are nice only sha224 get fail/rejected.



Below are all the signature digest I tried:





  1. //sha224 - fail



    openssl req -nodes -sha224 -newkey rsa:2048 -keyout PrivateKey_sha224.key -out CertificateRequest_sha224.csr



    openssl x509 -req -days 365 -sha224 -in CertificateRequest_sha224.csr -signkey PrivateKey_sha224.key -out my224.crt




  2. //sha256 - ok



    openssl req -nodes -sha256 -newkey rsa:2048 -keyout PrivateKey_sha256.key -out CertificateRequest_sha256.csr



    openssl x509 -req -days 365 -sha256 -in CertificateRequest_sha256.csr -signkey PrivateKey_sha256.key -out my256.crt




  3. //sha384 - ok



    openssl req -nodes -sha384 -newkey rsa:2048 -keyout PrivateKey_sha384.key -out CertificateRequest_sha384.csr



    openssl x509 -req -days 365 -sha384 -in CertificateRequest_sha384.csr -signkey PrivateKey_sha384.key -out my384.crt




  4. //sha512 - ok



    openssl req -nodes -sha512 -newkey rsa:2048 -keyout PrivateKey_sha512.key -out CertificateRequest_sha512.csr



    openssl x509 -req -days 365 -sha512 -in CertificateRequest_sha512.csr -signkey PrivateKey_sha512.key -out my512.crt




Back-end Code



  var credentials = {
cert: certificate,
key: privateKey,
honorCipherOrder: false,
ciphers: 'TLSv1.2+FIPS:kRSA+FIPS:!eNULL:!aNULL:!3DES',
secureProtocol: "TLSv1_2_method"
};
httpsServer = https.createServer(credentials, app);


Error of sha224:



enter image description here










share|improve this question





























    0















    I am using nodejs as https server. and trying to test by uing sha224 as signature digest, BUT I received this error "This certificate has an invalid digital signature" and unable to access to my website.
    tried sha256/sha384/sha512, they are nice only sha224 get fail/rejected.



    Below are all the signature digest I tried:





    1. //sha224 - fail



      openssl req -nodes -sha224 -newkey rsa:2048 -keyout PrivateKey_sha224.key -out CertificateRequest_sha224.csr



      openssl x509 -req -days 365 -sha224 -in CertificateRequest_sha224.csr -signkey PrivateKey_sha224.key -out my224.crt




    2. //sha256 - ok



      openssl req -nodes -sha256 -newkey rsa:2048 -keyout PrivateKey_sha256.key -out CertificateRequest_sha256.csr



      openssl x509 -req -days 365 -sha256 -in CertificateRequest_sha256.csr -signkey PrivateKey_sha256.key -out my256.crt




    3. //sha384 - ok



      openssl req -nodes -sha384 -newkey rsa:2048 -keyout PrivateKey_sha384.key -out CertificateRequest_sha384.csr



      openssl x509 -req -days 365 -sha384 -in CertificateRequest_sha384.csr -signkey PrivateKey_sha384.key -out my384.crt




    4. //sha512 - ok



      openssl req -nodes -sha512 -newkey rsa:2048 -keyout PrivateKey_sha512.key -out CertificateRequest_sha512.csr



      openssl x509 -req -days 365 -sha512 -in CertificateRequest_sha512.csr -signkey PrivateKey_sha512.key -out my512.crt




    Back-end Code



      var credentials = {
    cert: certificate,
    key: privateKey,
    honorCipherOrder: false,
    ciphers: 'TLSv1.2+FIPS:kRSA+FIPS:!eNULL:!aNULL:!3DES',
    secureProtocol: "TLSv1_2_method"
    };
    httpsServer = https.createServer(credentials, app);


    Error of sha224:



    enter image description here










    share|improve this question



























      0












      0








      0


      0






      I am using nodejs as https server. and trying to test by uing sha224 as signature digest, BUT I received this error "This certificate has an invalid digital signature" and unable to access to my website.
      tried sha256/sha384/sha512, they are nice only sha224 get fail/rejected.



      Below are all the signature digest I tried:





      1. //sha224 - fail



        openssl req -nodes -sha224 -newkey rsa:2048 -keyout PrivateKey_sha224.key -out CertificateRequest_sha224.csr



        openssl x509 -req -days 365 -sha224 -in CertificateRequest_sha224.csr -signkey PrivateKey_sha224.key -out my224.crt




      2. //sha256 - ok



        openssl req -nodes -sha256 -newkey rsa:2048 -keyout PrivateKey_sha256.key -out CertificateRequest_sha256.csr



        openssl x509 -req -days 365 -sha256 -in CertificateRequest_sha256.csr -signkey PrivateKey_sha256.key -out my256.crt




      3. //sha384 - ok



        openssl req -nodes -sha384 -newkey rsa:2048 -keyout PrivateKey_sha384.key -out CertificateRequest_sha384.csr



        openssl x509 -req -days 365 -sha384 -in CertificateRequest_sha384.csr -signkey PrivateKey_sha384.key -out my384.crt




      4. //sha512 - ok



        openssl req -nodes -sha512 -newkey rsa:2048 -keyout PrivateKey_sha512.key -out CertificateRequest_sha512.csr



        openssl x509 -req -days 365 -sha512 -in CertificateRequest_sha512.csr -signkey PrivateKey_sha512.key -out my512.crt




      Back-end Code



        var credentials = {
      cert: certificate,
      key: privateKey,
      honorCipherOrder: false,
      ciphers: 'TLSv1.2+FIPS:kRSA+FIPS:!eNULL:!aNULL:!3DES',
      secureProtocol: "TLSv1_2_method"
      };
      httpsServer = https.createServer(credentials, app);


      Error of sha224:



      enter image description here










      share|improve this question
















      I am using nodejs as https server. and trying to test by uing sha224 as signature digest, BUT I received this error "This certificate has an invalid digital signature" and unable to access to my website.
      tried sha256/sha384/sha512, they are nice only sha224 get fail/rejected.



      Below are all the signature digest I tried:





      1. //sha224 - fail



        openssl req -nodes -sha224 -newkey rsa:2048 -keyout PrivateKey_sha224.key -out CertificateRequest_sha224.csr



        openssl x509 -req -days 365 -sha224 -in CertificateRequest_sha224.csr -signkey PrivateKey_sha224.key -out my224.crt




      2. //sha256 - ok



        openssl req -nodes -sha256 -newkey rsa:2048 -keyout PrivateKey_sha256.key -out CertificateRequest_sha256.csr



        openssl x509 -req -days 365 -sha256 -in CertificateRequest_sha256.csr -signkey PrivateKey_sha256.key -out my256.crt




      3. //sha384 - ok



        openssl req -nodes -sha384 -newkey rsa:2048 -keyout PrivateKey_sha384.key -out CertificateRequest_sha384.csr



        openssl x509 -req -days 365 -sha384 -in CertificateRequest_sha384.csr -signkey PrivateKey_sha384.key -out my384.crt




      4. //sha512 - ok



        openssl req -nodes -sha512 -newkey rsa:2048 -keyout PrivateKey_sha512.key -out CertificateRequest_sha512.csr



        openssl x509 -req -days 365 -sha512 -in CertificateRequest_sha512.csr -signkey PrivateKey_sha512.key -out my512.crt




      Back-end Code



        var credentials = {
      cert: certificate,
      key: privateKey,
      honorCipherOrder: false,
      ciphers: 'TLSv1.2+FIPS:kRSA+FIPS:!eNULL:!aNULL:!3DES',
      secureProtocol: "TLSv1_2_method"
      };
      httpsServer = https.createServer(credentials, app);


      Error of sha224:



      enter image description here







      openssl signature






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited Nov 21 '18 at 2:33







      user917879

















      asked Nov 20 '18 at 8:48









      user917879user917879

      67210




      67210
























          0






          active

          oldest

          votes











          Your Answer






          StackExchange.ifUsing("editor", function () {
          StackExchange.using("externalEditor", function () {
          StackExchange.using("snippets", function () {
          StackExchange.snippets.init();
          });
          });
          }, "code-snippets");

          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "1"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53389228%2fthis-certificate-has-an-invalid-digital-signature-sha224%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes
















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Stack Overflow!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53389228%2fthis-certificate-has-an-invalid-digital-signature-sha224%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          Can a sorcerer learn a 5th-level spell early by creating spell slots using the Font of Magic feature?

          Does disintegrating a polymorphed enemy still kill it after the 2018 errata?

          A Topological Invariant for $pi_3(U(n))$