use SHA-1 as the default digest for the apps/openssl commands
This commit is contained in:
		
							
								
								
									
										6
									
								
								CHANGES
									
									
									
									
									
								
							
							
						
						
									
										6
									
								
								CHANGES
									
									
									
									
									
								
							@@ -2,7 +2,11 @@
 | 
			
		||||
 OpenSSL CHANGES
 | 
			
		||||
 _______________
 | 
			
		||||
 | 
			
		||||
 Changes between 0.9.7e and 0.9.8  [xx XXX xxxx]
 | 
			
		||||
 Changes between 0.9.7f and 0.9.8  [xx XXX xxxx]
 | 
			
		||||
 | 
			
		||||
  *) Use SHA-1 instead of MD5 as the default digest algorithm for
 | 
			
		||||
     the apps/openssl applications.
 | 
			
		||||
     [Nils Larsch]
 | 
			
		||||
 | 
			
		||||
  *) Compile clean with "-Wall -Wmissing-prototypes
 | 
			
		||||
     -Wstrict-prototypes -Wmissing-declarations -Werror". Currently
 | 
			
		||||
 
 | 
			
		||||
@@ -115,7 +115,7 @@ int MAIN(int argc, char **argv)
 | 
			
		||||
	X509_OBJECT xobj;
 | 
			
		||||
	EVP_PKEY *pkey;
 | 
			
		||||
	int do_ver = 0;
 | 
			
		||||
	const EVP_MD *md_alg,*digest=EVP_md5();
 | 
			
		||||
	const EVP_MD *md_alg,*digest=EVP_sha1();
 | 
			
		||||
 | 
			
		||||
	apps_startup();
 | 
			
		||||
 | 
			
		||||
 
 | 
			
		||||
@@ -67,7 +67,7 @@ cert_opt 	= ca_default		# Certificate field options
 | 
			
		||||
 | 
			
		||||
default_days	= 365			# how long to certify for
 | 
			
		||||
default_crl_days= 30			# how long before next CRL
 | 
			
		||||
default_md	= md5			# which md to use.
 | 
			
		||||
default_md	= sha1			# which md to use.
 | 
			
		||||
preserve	= no			# keep passed DN ordering
 | 
			
		||||
 | 
			
		||||
# A few difference way of specifying how similar the request should look
 | 
			
		||||
 
 | 
			
		||||
@@ -187,7 +187,7 @@ int MAIN(int argc, char **argv)
 | 
			
		||||
	char *p;
 | 
			
		||||
	char *subj = NULL;
 | 
			
		||||
	int multirdn = 0;
 | 
			
		||||
	const EVP_MD *md_alg=NULL,*digest=EVP_md5();
 | 
			
		||||
	const EVP_MD *md_alg=NULL,*digest=EVP_sha1();
 | 
			
		||||
	unsigned long chtype = MBSTRING_ASC;
 | 
			
		||||
#ifndef MONOLITH
 | 
			
		||||
	char *to_free;
 | 
			
		||||
 
 | 
			
		||||
@@ -184,7 +184,7 @@ int MAIN(int argc, char **argv)
 | 
			
		||||
	X509_REQ *rq=NULL;
 | 
			
		||||
	int fingerprint=0;
 | 
			
		||||
	char buf[256];
 | 
			
		||||
	const EVP_MD *md_alg,*digest=EVP_md5();
 | 
			
		||||
	const EVP_MD *md_alg,*digest=EVP_sha1();
 | 
			
		||||
	CONF *extconf = NULL;
 | 
			
		||||
	char *extsect = NULL, *extfile = NULL, *passin = NULL, *passargin = NULL;
 | 
			
		||||
	int need_rand = 0;
 | 
			
		||||
 
 | 
			
		||||
@@ -98,8 +98,8 @@ default.
 | 
			
		||||
 | 
			
		||||
the digest to use. This affects any signing or display option that uses a message
 | 
			
		||||
digest, such as the B<-fingerprint>, B<-signkey> and B<-CA> options. If not
 | 
			
		||||
specified then MD5 is used. If the key being used to sign with is a DSA key then
 | 
			
		||||
this option has no effect: SHA1 is always used with DSA keys.
 | 
			
		||||
specified then SHA1 is used. If the key being used to sign with is a DSA key
 | 
			
		||||
then this option has no effect: SHA1 is always used with DSA keys.
 | 
			
		||||
 | 
			
		||||
=item B<-engine id>
 | 
			
		||||
 | 
			
		||||
 
 | 
			
		||||
		Reference in New Issue
	
	Block a user