From 3621045631efc4c66673ece91785487a281180c8 Mon Sep 17 00:00:00 2001 From: Bruno Thomsen Date: Wed, 15 Oct 2014 12:48:27 +0200 Subject: mk-ca-bundle: added SHA-384 signature algorithm Certificates based on SHA-1 are being phased out[1]. So we should expect a rise in certificates based on SHA-2. Adding SHA-384 as a valid signature algorithm. [1] https://blog.mozilla.org/security/2014/09/23/phasing-out-certificates-with-sha-1-based-signature-algorithms/ Signed-off-by: Bruno Thomsen --- lib/mk-ca-bundle.pl | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'lib') diff --git a/lib/mk-ca-bundle.pl b/lib/mk-ca-bundle.pl index 51af5c99c..4278e8290 100755 --- a/lib/mk-ca-bundle.pl +++ b/lib/mk-ca-bundle.pl @@ -56,7 +56,7 @@ $opt_d = 'release'; # If the OpenSSL commandline is not in search path you can configure it here! my $openssl = 'openssl'; -my $version = '1.23'; +my $version = '1.24'; $opt_w = 76; # default base64 encoded lines length @@ -97,6 +97,7 @@ my @valid_signature_algorithms = ( "MD5", "SHA1", "SHA256", + "SHA384", "SHA512" ); -- cgit v1.2.3