Recommend to add the SM3withSM2 signature algorithm

[vanlee90]

It is recommended to add the SM3withSM2 signature algorithm to the digital certificate signature algorithms. The system already supports the sm2p256v1 curve, and Bouncy Castle (BC) already supports the SM3withSM2 algorithm. This will enable the issuance of digital certificates using the SM2 curve.

[Leisure12345]

I'm currently facing this problem. I want to use SM3withSM2 as the signature algorithm to initialize a CA, but unfortunately it's not currently supported. Or am I just not finding the right method? I've even considered recompiling and repackaging the image; I wonder if that's feasible?

[primetomas]

EJBCA does not support SM3withSM2, it requires code changes to make that available. Bouncy Castle supports it, but exposing it in EJBCA is not automatic for all algorithms that BC support.

If there is a real commercial need, I can mediate contact with Keyfactor.