From e09ef72014414529fa888dbc645b518530f553d9 Mon Sep 17 00:00:00 2001 From: immarvin Date: Thu, 14 Apr 2016 03:01:10 -0400 Subject: [PATCH] replace the digest algorithm of xCAT ssl certificate from sha1 to sha256 --- xCAT-server/share/xcat/ca/openssl.cnf.tmpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/xCAT-server/share/xcat/ca/openssl.cnf.tmpl b/xCAT-server/share/xcat/ca/openssl.cnf.tmpl index abfe25892..e3647635c 100644 --- a/xCAT-server/share/xcat/ca/openssl.cnf.tmpl +++ b/xCAT-server/share/xcat/ca/openssl.cnf.tmpl @@ -67,7 +67,7 @@ cert_opt = ca_default # Certificate field options default_days = 7300 # how long to certify for default_crl_days= 30 # how long before next CRL -default_md = sha1 # which md to use. +default_md = sha256 # which md to use. preserve = no # keep passed DN ordering # A few difference way of specifying how similar the request should look