From 0da1dceca1ea4c0f232872d3241ec76ed5ef1659 Mon Sep 17 00:00:00 2001
From: Adrian Likins <alikins@redhat.com>
Date: Fri, 27 Jun 2008 01:27:36 -0400
Subject: change the default messageDigest to sha1 from md5.

---
 certmaster/certs.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/certmaster/certs.py b/certmaster/certs.py
index 24cc3ab..77dde6b 100644
--- a/certmaster/certs.py
+++ b/certmaster/certs.py
@@ -112,7 +112,7 @@ def create_ca(CN="Certmaster Certificate Authority", ca_key_file=None, ca_cert_f
     cacert.set_serial_number(cacert.subject_name_hash())
     cacert.set_pubkey(careq.get_pubkey())
 #    cacert.add_extensions(create_ca_extensions())
-    cacert.sign(cakey, 'md5')
+    cacert.sign(cakey, 'sha1')
     if ca_cert_file:
         destfo = open(ca_cert_file, 'w')
         destfo.write(crypto.dump_certificate(crypto.FILETYPE_PEM, cacert))
-- 
cgit