[PATCH 2/4] Replace MD5 with SHA256

noname <[email protected]> Mon, 10 Nov 2014 16:32:45 +0000
Newsgroups gmane.network.irc.irssi.devel
Message-ID <20141110163245.GA15783@darkstar>
---
 src/core/network-openssl.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/core/network-openssl.c b/src/core/network-openssl.c
index adbbeff..efb7525 100644
--- a/src/core/network-openssl.c
+++ b/src/core/network-openssl.c
@@ -260,7 +260,7 @@ static gboolean irssi_ssl_verify(SSL *ssl, const char *hostname, int port, X509
 			g_warning("  Issuer  : %s", str);
 			free(str);
 		}
-		if (! X509_digest(cert, EVP_md5(), md, &n))
+		if (! X509_digest(cert, EVP_sha256(), md, &n))
 			g_warning("  Could not get fingerprint from peer certificate");
 		else {
 			char hex[] = "0123456789ABCDEF";
@@ -272,7 +272,7 @@ static gboolean irssi_ssl_verify(SSL *ssl, const char *hostname, int port, X509
 					fp[i*3+1] = hex[(md[i] >> 0) & 0xF];
 					fp[i*3+2] = i == n - 1 ? '\0' : ':';
 				}
-				g_warning("  MD5 Fingerprint : %s", fp);
+				g_warning("  SHA256 Fingerprint : %s", fp);
 			}
 		}
 		return FALSE;
-- 
1.8.4