diff options
author | jim-p <jimp@pfsense.org> | 2013-02-19 09:08:01 -0500 |
---|---|---|
committer | jim-p <jimp@pfsense.org> | 2013-02-19 09:08:01 -0500 |
commit | 28a20fdbf4621c0f5b854615dcc31f5234812f00 (patch) | |
tree | 3d4f5f54106322d8b8798aee7c11a35343d19008 /usr | |
parent | 741d748d72c81f84fdeebe327c6d7ab61f843a84 (diff) | |
download | pfsense-28a20fdbf4621c0f5b854615dcc31f5234812f00.zip pfsense-28a20fdbf4621c0f5b854615dcc31f5234812f00.tar.gz |
Default to using sha256 for a ca/cert digest algorithm, since sha1 is no longer recommended.
Diffstat (limited to 'usr')
-rw-r--r-- | usr/local/www/system_camanager.php | 1 | ||||
-rw-r--r-- | usr/local/www/system_certmanager.php | 1 |
2 files changed, 2 insertions, 0 deletions
diff --git a/usr/local/www/system_camanager.php b/usr/local/www/system_camanager.php index 3c97725..0033339 100644 --- a/usr/local/www/system_camanager.php +++ b/usr/local/www/system_camanager.php @@ -114,6 +114,7 @@ if ($act == "edit") { if ($act == "new") { $pconfig['method'] = $_GET['method']; $pconfig['keylen'] = "2048"; + $pconfig['digest_alg'] = "sha256"; $pconfig['lifetime'] = "3650"; $pconfig['dn_commonname'] = "internal-ca"; } diff --git a/usr/local/www/system_certmanager.php b/usr/local/www/system_certmanager.php index 9a0e530..74d6884 100644 --- a/usr/local/www/system_certmanager.php +++ b/usr/local/www/system_certmanager.php @@ -108,6 +108,7 @@ if ($act == "new") { $pconfig['method'] = $_GET['method']; $pconfig['keylen'] = "2048"; $pconfig['csr_keylen'] = "2048"; + $pconfig['digest_alg'] = "sha256"; $pconfig['type'] = "user"; $pconfig['lifetime'] = "3650"; } |