Upgrade the default hashing algorithm (#7241)
* Upgrade the default hashing algorithm Upgrade the default hashing algorithm for message digests from md5 to sha256. * Update changelog
This commit is contained in:
parent
b743e664a0
commit
dcd18eebda
2 changed files with 3 additions and 2 deletions
|
|
@ -3,6 +3,7 @@
|
||||||
|
|
||||||
Bug fixes:
|
Bug fixes:
|
||||||
- #7208 Fix crash on FreeBSD when pressing special keys on a client.
|
- #7208 Fix crash on FreeBSD when pressing special keys on a client.
|
||||||
|
- #7241 Change the default signature hashing algorithm for sha256.
|
||||||
|
|
||||||
Enhancements:
|
Enhancements:
|
||||||
- #7222 Ability to initiate non-TLS connection from server
|
- #7222 Ability to initiate non-TLS connection from server
|
||||||
|
|
|
||||||
|
|
@ -15,7 +15,7 @@ new_certs_dir = $dir/certs
|
||||||
certificate = $dir/cacert.pem
|
certificate = $dir/cacert.pem
|
||||||
private_key = $dir/private/cakey.pem
|
private_key = $dir/private/cakey.pem
|
||||||
default_days = 365
|
default_days = 365
|
||||||
default_md = md5
|
default_md = sha256
|
||||||
preserve = no
|
preserve = no
|
||||||
email_in_dn = no
|
email_in_dn = no
|
||||||
nameopt = default_ca
|
nameopt = default_ca
|
||||||
|
|
@ -33,7 +33,7 @@ emailAddress = optional
|
||||||
[req]
|
[req]
|
||||||
default_bits = 1024 # Size of keys
|
default_bits = 1024 # Size of keys
|
||||||
default_keyfile = key.pem # name of generated keys
|
default_keyfile = key.pem # name of generated keys
|
||||||
default_md = md5 # message digest algorithm
|
default_md = sha256 # message digest algorithm
|
||||||
string_mask = nombstr # permitted characters
|
string_mask = nombstr # permitted characters
|
||||||
distinguished_name = req_distinguished_name
|
distinguished_name = req_distinguished_name
|
||||||
req_extensions = v3_req
|
req_extensions = v3_req
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue