From: Felix Fietkau <nbd@nbd.name>
Date: Fri, 17 Feb 2017 13:21:47 +0000 (+0100)
Subject: uhttpd: use sha256 when generating certificates with openssl (FS#512)
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=7df998bb6d0830e9cc9506036bebf4c73ecb032d;p=openwrt%2Fstaging%2Fstintel.git

uhttpd: use sha256 when generating certificates with openssl (FS#512)

Patch from attachment to FS#512

Signed-off-by: Felix Fietkau <nbd@nbd.name>
---

diff --git a/package/network/services/uhttpd/files/uhttpd.init b/package/network/services/uhttpd/files/uhttpd.init
index 53bf04c921..6b8be1c7e4 100755
--- a/package/network/services/uhttpd/files/uhttpd.init
+++ b/package/network/services/uhttpd/files/uhttpd.init
@@ -47,7 +47,7 @@ generate_keys() {
 	# Prefer px5g for certificate generation (existence evaluated last)
 	local GENKEY_CMD=""
 	local UNIQUEID=$(dd if=/dev/urandom bs=1 count=4 | hexdump -e '1/1 "%02x"')
-	[ -x "$OPENSSL_BIN" ] && GENKEY_CMD="$OPENSSL_BIN req -x509 -outform der -nodes"
+	[ -x "$OPENSSL_BIN" ] && GENKEY_CMD="$OPENSSL_BIN req -x509 -sha256 -outform der -nodes"
 	[ -x "$PX5G_BIN" ] && GENKEY_CMD="$PX5G_BIN selfsigned -der"
 	[ -n "$GENKEY_CMD" ] && {
 		$GENKEY_CMD \