Selecting SHA-1 in CSR

[aagrafi]

Hello,

A customer issues a CSR through a FortiADC (the same happens in a FortiGate) and says that the certificate received is signed as SHA-256. The customer requires that the certificate will be signed using the SHA-1 hash algorithm instead. Is this possible (and how), or is SHA-256 the only option?

Thanks

[aagrafi]

The problem was solved by skipping the CSR in the FortiADC and using openSSL to create a certificate with SHA-1 hash.