change the default digest used by

openssl x509 -fingerprint
openssl crl -fingerprint
from sha1 to sha256

ok jsing@

1 files changed, 2 insertions, 2 deletions

diff --git a/src/usr.bin/openssl/crl.c b/src/usr.bin/openssl/crl.c
index 645b16ea54..cb1c18fa40 100644
--- a/src/usr.bin/openssl/crl.c
+++ b/src/usr.bin/openssl/crl.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: crl.c,v 1.11 2018/02/07 05:47:55 jsing Exp $ */
+/* $OpenBSD: crl.c,v 1.12 2019/01/19 21:17:05 jsg Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -243,7 +243,7 @@ crl_main(int argc, char **argv)
                 }
         }
 
-        digest = EVP_sha1();
+        digest = EVP_sha256();
 
         memset(&crl_config, 0, sizeof(crl_config));
         crl_config.informat = FORMAT_PEM;