From 785df805d7e7c3b8cb007006719b002be2885f8d Mon Sep 17 00:00:00 2001 From: Aaron Jones Date: Tue, 15 Nov 2016 12:34:49 +0000 Subject: [PATCH] reference.conf: bump the recommended digest algorithm from SHA-1 to SHA2-256 ircd.conf.example still has SHA-1 for the people who want to quickly deploy by renaming that file and adjusting as appropriate. --- doc/reference.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/reference.conf b/doc/reference.conf index d385cba4..7c67e2d3 100755 --- a/doc/reference.conf +++ b/doc/reference.conf @@ -1336,7 +1336,7 @@ general { * $ openssl x509 -pubkey -noout < your.crt | grep -v 'PUBLIC KEY' | base64 -d | \ * sha512sum | awk '{ print $1 }' | sed -r -e 's/^/SPKI:SHA2-512:/' */ - certfp_method = sha1; + certfp_method = sha256; }; modules {