Upgrade the default hashing algorithm (#7241)
* Upgrade the default hashing algorithm Upgrade the default hashing algorithm for message digests from md5 to sha256. * Update changelog
This commit is contained in:
@ -3,6 +3,7 @@
|
||||
|
||||
Bug fixes:
|
||||
- #7208 Fix crash on FreeBSD when pressing special keys on a client.
|
||||
- #7241 Change the default signature hashing algorithm for sha256.
|
||||
|
||||
Enhancements:
|
||||
- #7222 Ability to initiate non-TLS connection from server
|
||||
|
||||
@ -15,7 +15,7 @@ new_certs_dir = $dir/certs
|
||||
certificate = $dir/cacert.pem
|
||||
private_key = $dir/private/cakey.pem
|
||||
default_days = 365
|
||||
default_md = md5
|
||||
default_md = sha256
|
||||
preserve = no
|
||||
email_in_dn = no
|
||||
nameopt = default_ca
|
||||
@ -33,7 +33,7 @@ emailAddress = optional
|
||||
[req]
|
||||
default_bits = 1024 # Size of keys
|
||||
default_keyfile = key.pem # name of generated keys
|
||||
default_md = md5 # message digest algorithm
|
||||
default_md = sha256 # message digest algorithm
|
||||
string_mask = nombstr # permitted characters
|
||||
distinguished_name = req_distinguished_name
|
||||
req_extensions = v3_req
|
||||
|
||||
Reference in New Issue
Block a user