TG-336

Изменение шифрования ключа sha1 -> sha256
10 months ago · 8b17b41ec3
parent 7cb56ecf48
commit 8b17b41ec3
1 changed files with 1 additions and 1 deletions
--- a/pym/core/server/create_cert.py
+++ b/pym/core/server/create_cert.py
@ -182,7 +182,7 @@ def sign_client_certifacation_request(ca_keyfile, ca_certfile, requestfile, out_
            crypto.X509Extension(b'extendedKeyUsage', False, b'clientAuth'),
            crypto.X509Extension(b'nsComment', False, 'group:{}'.format(group).encode("UTF-8")),
        ])
-        cert.sign(pkey, 'sha1')
+        cert.sign(pkey, 'sha256')

        with writeFile(out_cert, binary=True) as f:
            f.write(crypto.dump_certificate(crypto.FILETYPE_PEM, cert))