From dcd18eebdac5864d994c430a9bb395f432bfaeb9 Mon Sep 17 00:00:00 2001 From: Kyle Bloom Date: Thu, 15 Dec 2022 16:22:42 +0000 Subject: [PATCH] Upgrade the default hashing algorithm (#7241) * Upgrade the default hashing algorithm Upgrade the default hashing algorithm for message digests from md5 to sha256. * Update changelog --- ChangeLog | 1 + res/openssl/synergy.conf | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index ac4beaa5a..89b0b4bd1 100644 --- a/ChangeLog +++ b/ChangeLog @@ -3,6 +3,7 @@ Bug fixes: - #7208 Fix crash on FreeBSD when pressing special keys on a client. +- #7241 Change the default signature hashing algorithm for sha256. Enhancements: - #7222 Ability to initiate non-TLS connection from server diff --git a/res/openssl/synergy.conf b/res/openssl/synergy.conf index c7a3e4397..f7fdff77e 100644 --- a/res/openssl/synergy.conf +++ b/res/openssl/synergy.conf @@ -15,7 +15,7 @@ new_certs_dir = $dir/certs certificate = $dir/cacert.pem private_key = $dir/private/cakey.pem default_days = 365 -default_md = md5 +default_md = sha256 preserve = no email_in_dn = no nameopt = default_ca @@ -33,7 +33,7 @@ emailAddress = optional [req] default_bits = 1024 # Size of keys default_keyfile = key.pem # name of generated keys -default_md = md5 # message digest algorithm +default_md = sha256 # message digest algorithm string_mask = nombstr # permitted characters distinguished_name = req_distinguished_name req_extensions = v3_req