From 24c0145c2cdb7eb8006020579c7c8b82f0108412 Mon Sep 17 00:00:00 2001
From: jim-p <jimp@pfsense.org>
Date: Mon, 18 Feb 2013 08:46:17 -0500
Subject: Add Digest Algorithm option to the CSR screen, should fix #2820

---
 usr/local/www/system_certmanager.php | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

(limited to 'usr/local/www/system_certmanager.php')

diff --git a/usr/local/www/system_certmanager.php b/usr/local/www/system_certmanager.php
index b120015..8450cf0 100644
--- a/usr/local/www/system_certmanager.php
+++ b/usr/local/www/system_certmanager.php
@@ -856,6 +856,22 @@ function internalca_change() {
 							</td>
 						</tr>
 						<tr>
+							<td width="22%" valign="top" class="vncellreq"><?=gettext("Digest Algorithm");?></td>
+							<td width="78%" class="vtable">
+								<select name='digest_alg' id='digest_alg' class="formselect">
+								<?php
+									foreach( $openssl_digest_algs as $digest_alg):
+									$selected = "";
+									if ($pconfig['digest_alg'] == $digest_alg)
+										$selected = " selected";
+								?>
+									<option value="<?=$digest_alg;?>"<?=$selected;?>><?=strtoupper($digest_alg);?></option>
+								<?php endforeach; ?>
+								</select>
+								<br/><?= gettext("NOTE: It is recommended to use an algorithm stronger than SHA1 when possible.") ?>
+							</td>
+						</tr>
+						<tr>
 							<td width="22%" valign="top" class="vncellreq"><?=gettext("Distinguished name");?></td>
 							<td width="78%" class="vtable">
 								<table border="0" cellspacing="0" cellpadding="2">
-- 
cgit v1.1