summaryrefslogtreecommitdiffstats
path: root/net/data/ssl/scripts/redundant-ca.cnf
diff options
context:
space:
mode:
authorrsleevi <rsleevi@chromium.org>2014-09-26 15:02:53 -0700
committerCommit bot <commit-bot@chromium.org>2014-09-26 22:03:21 +0000
commit04b34e02245194b01c08cd5cfb350378797e8681 (patch)
treecc59d00fd4b7e79a3e0938e241bbfd64c0f8bb12 /net/data/ssl/scripts/redundant-ca.cnf
parent2d00e9e85555a42000205dab41284bca5a28a579 (diff)
downloadchromium_src-04b34e02245194b01c08cd5cfb350378797e8681.zip
chromium_src-04b34e02245194b01c08cd5cfb350378797e8681.tar.gz
chromium_src-04b34e02245194b01c08cd5cfb350378797e8681.tar.bz2
Update test cert generation scripts to use SHA-256 by default
This cleans up the README file to clearly indicate which certificates are real world certificates, which are generated by hand / by other sources, and which are generated via script (and which script). Additionally, several test certificates that were previously generated by hand and several test CRLSets that were hardcoded are now generated automatically by the scripts. BUG=401365 Review URL: https://codereview.chromium.org/515583004 Cr-Commit-Position: refs/heads/master@{#297047}
Diffstat (limited to 'net/data/ssl/scripts/redundant-ca.cnf')
-rw-r--r--net/data/ssl/scripts/redundant-ca.cnf4
1 files changed, 2 insertions, 2 deletions
diff --git a/net/data/ssl/scripts/redundant-ca.cnf b/net/data/ssl/scripts/redundant-ca.cnf
index b03eb81..5707b73 100644
--- a/net/data/ssl/scripts/redundant-ca.cnf
+++ b/net/data/ssl/scripts/redundant-ca.cnf
@@ -15,7 +15,7 @@ private_key = ${dir}/${ENV::CERTIFICATE}.key
RANDFILE = ${dir}/rand
default_days = 3650
default_crl_days = 30
-default_md = sha1
+default_md = sha256
policy = policy_anything
unique_subject = no
@@ -50,7 +50,7 @@ emailAddress = optional
[req]
# The request section used to generate certificate requests.
default_bits = 2048
-default_md = sha1
+default_md = sha256
string_mask = utf8only
prompt = no
encrypt_key = no