v5.2.5 and SHA1 or SHA256

[Ian_Harrison]

Hi

Can anyone tell me if the certificate used for SSL deep inspection has been changed to use SHA256 or is it still using SHA1? The certificate on v5.2.3 is called Fortinet_CA_SSLProxy. I have checked the release not for v5.2.5 but can't find any info in there.

Thanks

Ian

[emnoc]

sha256 

Look at the certificate details.

[mrandrew]

I have 5.2.5 running on a FWF 60D.  I downloaded the Fortinet_CA_SSLProxy from the certificates menu and opened with Windows.  Signature algorithm sha1RSA, Signature hash algorithm sha1, Public key RSA (2048), Thumbprint algorithm sha1.  

[emnoc]

I can't speak of  v5.2.6 but under v5.4 it's the certificate name;

Fortinet_CA_SSL.cer vrs Fortinet_CA_SSLProxy.cer

You should try both and review the Signature Algorithm .

Ken