From 39a6a4a707f23992beefc93d99549466857d2b10 Mon Sep 17 00:00:00 2001 From: Rich Salz Date: Wed, 30 Dec 2015 18:18:08 -0500 Subject: [PATCH] Update to SHA256 for TSA signing digest. Reviewed-by: Richard Levitte --- apps/openssl-vms.cnf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/openssl-vms.cnf b/apps/openssl-vms.cnf index 51a296b2d8..94caf45abb 100644 --- a/apps/openssl-vms.cnf +++ b/apps/openssl-vms.cnf @@ -335,7 +335,7 @@ signer_cert = $dir/tsacert.pem # The TSA signing certificate certs = $dir.cacert.pem] # Certificate chain to include in reply # (optional) signer_key = $dir/private/tsakey.pem # The TSA private key (optional) -signer_digest = sha1 # Signing digest to use. (Optional) +signer_digest = sha256 # Signing digest to use. (Optional) default_policy = tsa_policy1 # Policy if request did not specify it # (optional) -- 2.34.1