Switch to use SHA-256 for certificates / fingerprints.
This CL changes identity generation to use SHA-256 for the self-signed certificates and the fingerprints sent in the SDP. BUG=4602 R=juberti@google.com Review URL: https://webrtc-codereview.appspot.com/47149004 Cr-Commit-Position: refs/heads/master@{#9173}
This commit is contained in:
@ -112,7 +112,7 @@ static X509* MakeCertificate(EVP_PKEY* pkey, const SSLIdentityParams& params) {
|
||||
!X509_gmtime_adj(X509_get_notAfter(x509), params.not_after))
|
||||
goto error;
|
||||
|
||||
if (!X509_sign(x509, pkey, EVP_sha1()))
|
||||
if (!X509_sign(x509, pkey, EVP_sha256()))
|
||||
goto error;
|
||||
|
||||
BN_free(serial_number);
|
||||
|
||||
Reference in New Issue
Block a user