Index: net/data/ssl/scripts/policy.cnf |
diff --git a/net/data/ssl/scripts/policy.cnf b/net/data/ssl/scripts/policy.cnf |
index f5f1e0b1f17252c4b72d68610017dbddbe5996f6..12af8283b73b4ef23b4f1dc46de5e024ce92194d 100644 |
--- a/net/data/ssl/scripts/policy.cnf |
+++ b/net/data/ssl/scripts/policy.cnf |
@@ -8,7 +8,7 @@ preserve = yes |
[CA_root] |
dir = ${ENV::CA_DIR} |
key_size = 2048 |
-algo = sha1 |
+algo = sha256 |
database = $dir/${ENV::CA_NAME}-index.txt |
new_certs_dir = $dir |
serial = $dir/${ENV::CA_NAME}-serial |
@@ -17,7 +17,7 @@ private_key = $dir/${ENV::CA_NAME}.key |
RANDFILE = $dir/.rand |
default_days = 3650 |
default_crl_days = 30 |
-default_md = sha1 |
+default_md = sha256 |
policy = policy_anything |
unique_subject = no |
copy_extensions = copy |
@@ -49,7 +49,7 @@ emailAddress = optional |
[req] |
default_bits = 2048 |
-default_md = sha1 |
+default_md = sha256 |
string_mask = utf8only |
prompt = no |
encrypt_key = no |