I am changing from SHA-1
to SHA-256
for version 3.3 of CFDI. I use OpenSSL to generate the key and sign the original string but I can not get the validations to pass, if it generates a stamp but it is valid with several websites and it does not happen. These are the OpenSSL instructions to see if anyone can help me ...
openssl pkcs8 -inform DER -in Certificate.key -passin pass: Password -out Certificate.key.pem
openssl dgst -sha256 -sign Certificate.key.pem StringOriginal.txt | openssl enc -base64 -A > Stamp256.txt