I did some testing with ECC and SHA2 today and as such decided to update my script for testing Qualified Subordination to make it easy to get certificates that use these algorithms.

There are now several configurable variables in makepki.bat:

• key = possible values include RSA or ECC
• rsasize = possible values include 1024,2048,4096
• eccsize= possible values include secp256r1,secp384r1,secp521r1
• hash = possible values include sha1,sha256,sha384,sha512

With these its very easy to get chains to do testing with that include these algorithms, have fun.

Ryan