diff options
| -rw-r--r-- | lib/webrick/ssl.rb | 4 | ||||
| -rw-r--r-- | test/webrick/test_httpproxy.rb | 2 |
2 files changed, 3 insertions, 3 deletions
diff --git a/lib/webrick/ssl.rb b/lib/webrick/ssl.rb index 8a334eaff1..d125083528 100644 --- a/lib/webrick/ssl.rb +++ b/lib/webrick/ssl.rb @@ -130,7 +130,7 @@ module WEBrick aki = ef.create_extension("authorityKeyIdentifier", "keyid:always,issuer:always") cert.add_extension(aki) - cert.sign(rsa, OpenSSL::Digest::SHA1.new) + cert.sign(rsa, OpenSSL::Digest::SHA256.new) return [ cert, rsa ] end @@ -181,7 +181,7 @@ module WEBrick unless config[:SSLCertificate] cn = config[:SSLCertName] comment = config[:SSLCertComment] - cert, key = Utils::create_self_signed_cert(1024, cn, comment) + cert, key = Utils::create_self_signed_cert(2048, cn, comment) config[:SSLCertificate] = cert config[:SSLPrivateKey] = key end diff --git a/test/webrick/test_httpproxy.rb b/test/webrick/test_httpproxy.rb index 4eef12a47d..a9f6f7d610 100644 --- a/test/webrick/test_httpproxy.rb +++ b/test/webrick/test_httpproxy.rb @@ -230,7 +230,7 @@ class TestWEBrickHTTPProxy < Test::Unit::TestCase cert.not_after = Time.now + 3600 ef = OpenSSL::X509::ExtensionFactory.new(cert, cert) exts.each {|args| cert.add_extension(ef.create_extension(*args)) } - cert.sign(key, "sha1") + cert.sign(key, "sha256") return cert end if defined?(OpenSSL::SSL) |