remove sample.pem and use sha256 to generate the sample certificate

README.txt

@@ -10,7 +10,7 @@ To get started do::
 The server will come up on port 8080. You can create a new key encrypting key
 using::
 
-  $ wget https://localhost:8080/new -O kek.dat --ca-certificate sample.pem \
+  $ wget https://localhost:8080/new -O kek.dat --ca-certificate sample.crt \
          --post-data=""
 
 or, if you want a more convenient tool::
@@ -21,7 +21,7 @@ The data encryption key can now be retrieved by posting the KEK to another
 URL::
 
   $ wget https://localhost:8080/key --header 'Content-Type: text/plain' \
-         --post-file kek.dat -O datakey.dat --ca-certificate sample.pem
+         --post-file kek.dat -O datakey.dat --ca-certificate sample.crt
 
 or ::
 

generate-sample-cert.sh

@@ -1,4 +1,3 @@
 #!/bin/sh
 openssl genrsa 1024 > sample.key
-openssl req -new -x509 -nodes -sha1 -days 3650 -key sample.key > sample.crt
-cat sample.crt sample.key > sample.pem
+openssl req -new -x509 -nodes -sha256 -days 3650 -key sample.key > sample.crt