sha1 我要怎么做才能变成sha256

//openssl genrsa -passout pass:Lvp@1001 -des3 -out RootCA.key 1024
//openssl req -new -x509 -days 3650 -passin pass:Lvp@1001 -key RootCA.key -sha256 -subj /C=CN/L=ShenZhen/O=LeagSoft -out RootCA.crt  

//openssl.exe genrsa -passout pass:Lvp@1001 -sha256 -out secondCA.key 2048
//openssl  rsa -passin pass:Lvp@1001 -in secondCA.key -out secondCA.key
//openssl req -new -config openssl.cnf -subj /C=CN/L=ShenZhen/O=LeagSoft/CN=www.baidu.com  -days 1826 -key secondCA.key -sha256 -out secondCA.csr
//openssl.exe  ca -passin pass:Lvp@1001 -extensions v3_ca  -batch -config ./openssl.cnf -in  ./secondCA.csr  -days 1826 -out ./secondCA.crt -cert ./RootCA.crt -keyfile ./RootCA.key

这样生成 的二级证书 的 签名算法 依然还是 sha1 我要怎么做才能变成sha256 呢

http://blog.csdn.net/wuwo333/article/details/53020403