Bug #66833 [PATCH]: Default disgest algo is still MD5

Edit report at https://bugs.php.net/bug.php?id=66833&edit=1 ID: 66833 Patch added by: remi@php.net Reported by: remi@php.net Summary: Default disgest algo is still MD5 Status: Open Type: Bug Package: OpenSSL related Operating System: GNU/LInux PHP Version: 5.4.25 Block user comment: N Private report: N New Comment: The following patch has been added/updated: Patch Name: openssl-defaultmd-sha1.patch Revision: 1394108650 URL: https://bugs.php.net/patch-display.php?bug=66833&patch=openssl-defaultmd-sha1.patch&revision=1394108650 Previous Comments: ------------------------------------------------------------------------ [2014-03-06 11:49:13] remi@php.net To be considered: there are still widely used legacy applications that cannot verify signatures that use sha256. ------------------------------------------------------------------------ [2014-03-06 11:43:38] remi@php.net This change will allow to revert workaround added in http://git.php.net/?p=php-src.git;a=commitdiff;h=721b9a7c8dbe52cd3f0d2ac69b8eb9c78a0721c9 ------------------------------------------------------------------------ [2014-03-06 11:42:43] remi@php.net Description: ------------ Default disgest algo is still MD5, which means we can generate digest which are rejected on some recent openssl version (at least RHEL-7 and Fedora 21). Proposal: switch to sha256 (sha1 is also now considered as unsecure) ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=66833&edit=1