Upgrade the default hashing algorithm (#7241)

* Upgrade the default hashing algorithm

Upgrade the default hashing algorithm for message digests from md5 to sha256.

* Update changelog
This commit is contained in:
Kyle Bloom
2022-12-15 16:22:42 +00:00
committed by GitHub
parent b743e664a0
commit dcd18eebda
2 changed files with 3 additions and 2 deletions

View File

@ -3,6 +3,7 @@
Bug fixes:
- #7208 Fix crash on FreeBSD when pressing special keys on a client.
- #7241 Change the default signature hashing algorithm for sha256.
Enhancements:
- #7222 Ability to initiate non-TLS connection from server

View File

@ -15,7 +15,7 @@ new_certs_dir = $dir/certs
certificate = $dir/cacert.pem
private_key = $dir/private/cakey.pem
default_days = 365
default_md = md5
default_md = sha256
preserve = no
email_in_dn = no
nameopt = default_ca
@ -33,7 +33,7 @@ emailAddress = optional
[req]
default_bits = 1024 # Size of keys
default_keyfile = key.pem # name of generated keys
default_md = md5 # message digest algorithm
default_md = sha256 # message digest algorithm
string_mask = nombstr # permitted characters
distinguished_name = req_distinguished_name
req_extensions = v3_req