test: use sha256 as default MD for test SSL certificates

This permits to fix running tests on Fedora 33 with OpenSSL 1.1.1h
fusioninventory · Nov 26, 2020 · 413f606 · 413f606
1 parent 12504dc
commit 413f606
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/resources/ssl/cnf/ca.cnf b/resources/ssl/cnf/ca.cnf
@@ -1,6 +1,6 @@
 [ req ]
 default_bits       = 2048
-default_md         = sha1
+default_md         = sha256
 distinguished_name = req_dn
 req_extensions     = req_ext
 string_mask        = nombstr
@@ -33,7 +33,7 @@ crl_dir         = $dir/crl              # Where the issued crl are kept
 
 default_days    = 3650                  # how long to certify for
 default_crl_days= 30                    # how long before next CRL
-default_md      = sha1                  # which md to use.
+default_md      = sha256                # which md to use.
 preserve        = no                    # keep passed DN ordering
 
 policy          = ca_default_policy

diff --git a/resources/ssl/generate.sh b/resources/ssl/generate.sh
@@ -20,7 +20,7 @@ openssl genrsa -passout pass: -out key/ca.pem 2048            2>&1 | log
 echo
 
 echo "Generating CA cert..."                                    | addlog
-openssl req -config cnf/ca.cnf -new -sha256 -x509 -days 3650 \
+openssl req -config cnf/ca.cnf -new -x509 -days 3650 \
 	-key key/ca.pem -out crt/ca.pem                           2>&1 | log
 echo