diff options
| author |  Sadie Powell | 2020-04-09 18:07:07 +0100 |
|---|---|---|
| committer | Sadie Powell | 2020-04-09 18:07:07 +0100 |
| commit | efe904f2f07309beb999386f950211892c732a50 (patch) | |
| tree | 7d9ff8b407685919ee543d52801eb09726c95254 | |
| parent | Merge branch 'insp3' into master. (diff) | |
Default <sslprofile:hash> to sha256 for GnuTLS and OpenSSL.
| -rw-r--r-- | src/modules/extra/m_ssl_gnutls.cpp | 2 | ||||
| -rw-r--r-- | src/modules/extra/m_ssl_openssl.cpp | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/src/modules/extra/m_ssl_gnutls.cpp b/src/modules/extra/m_ssl_gnutls.cpp index 80185d982..4a6598485 100644 --- a/src/modules/extra/m_ssl_gnutls.cpp +++ b/src/modules/extra/m_ssl_gnutls.cpp @@ -553,7 +553,7 @@ namespace GnuTLS , dh(DHParams::Import(ReadFile(tag->getString("dhfile", "dhparams.pem", 1)))) , priostr(GetPrioStr(profilename, tag)) , mindh(tag->getUInt("mindhbits", 1024)) - , hashstr(tag->getString("hash", "md5", 1)) + , hashstr(tag->getString("hash", "sha256", 1)) , requestclientcert(tag->getBool("requestclientcert", true)) { // Load trusted CA and revocation list, if set diff --git a/src/modules/extra/m_ssl_openssl.cpp b/src/modules/extra/m_ssl_openssl.cpp index f15a16a4c..660b399bd 100644 --- a/src/modules/extra/m_ssl_openssl.cpp +++ b/src/modules/extra/m_ssl_openssl.cpp @@ -352,7 +352,7 @@ namespace OpenSSL if ((!ctx.SetDH(dh)) || (!clictx.SetDH(dh))) throw Exception("Couldn't set DH parameters"); - const std::string hash = tag->getString("hash", "md5", 1); + const std::string hash = tag->getString("hash", "sha256", 1); digest = EVP_get_digestbyname(hash.c_str()); if (digest == NULL) throw Exception("Unknown hash type " + hash); |