Bug #66833 [Com]: Default disgest algo is still MD5

Edit report at https://bugs.php.net/bug.php?id=66833&edit=1 ID: 66833 Comment by: remi@php.net Reported by: remi@php.net Summary: Default disgest algo is still MD5 Status: Open Type: Bug Package: OpenSSL related Operating System: GNU/LInux PHP Version: 5.4.25 Block user comment: N Private report: N New Comment: To be considered: there are still widely used legacy applications that cannot verify signatures that use sha256. Previous Comments: ------------------------------------------------------------------------ [2014-03-06 11:43:38] remi@php.net This change will allow to revert workaround added in http://git.php.net/?p=php-src.git;a=commitdiff;h=721b9a7c8dbe52cd3f0d2ac69b8eb9c78a0721c9 ------------------------------------------------------------------------ [2014-03-06 11:42:43] remi@php.net Description: ------------ Default disgest algo is still MD5, which means we can generate digest which are rejected on some recent openssl version (at least RHEL-7 and Fedora 21). Proposal: switch to sha256 (sha1 is also now considered as unsecure) ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=66833&edit=1