cert-digest-algo clarification

[David Shaw]

On Jul 12, 2012, at 8:41 AM, Sam Smith wrote:

> regarding #1: you said there are no preferences. Assuming I don't set cert-digest-algo, what is the HASH that is used to sign keys with? 

cert-digest-algo has no preferences (no ranked lists, etc). - it defaults to SHA-1, but you can override it as desired.  Note that you can only override with an algorithm that works for the key you are making the certification with.  For example, you can't use RIPEMD-160 with a DSA-2048 key.

David