bughz/3proxy
1
0
Fork 0
mirror of https://github.com/3proxy/3proxy.git synced 2025-02-24 02:55:40 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

SSL_Plugin: switch to SHA-256 signature

Browse Source
This commit is contained in:
z3APA3A 2016-12-22 19:16:50 +03:00
parent 16f094168a
commit 3c9ff54ae8
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/plugins/SSLPlugin/my_ssl.c
View File

@ -112,11 +112,11 @@ SSL_CERT ssl_copy_cert(SSL_CERT cert)
unsigned char p2[] = "3proxy"; unsigned char p2[] = "3proxy";
unsigned char p3[] = "3proxy CA"; unsigned char p3[] = "3proxy CA";
static char hash_name[sizeof(src_cert->sha1_hash)*2 + 1]; static char hash_name_sha1[sizeof(src_cert->sha1_hash)*2 + 1];
static char cache_name[200]; static char cache_name[200];
bin2hex(src_cert->sha1_hash, sizeof(src_cert->sha1_hash), hash_name, sizeof(hash_name)); bin2hex(src_cert->sha1_hash, sizeof(src_cert->sha1_hash), hash_name_sha1, sizeof(hash_name_sha1));
sprintf(cache_name, "%s%s.pem", cert_path, hash_name); sprintf(cache_name, "%s%s.pem", cert_path, hash_name_sha1);
/* check if certificate is already cached */ /* check if certificate is already cached */
fcache = fopen(cache_name, "rb"); fcache = fopen(cache_name, "rb");
if ( fcache != NULL ) { if ( fcache != NULL ) {
@ -163,7 +163,7 @@ SSL_CERT ssl_copy_cert(SSL_CERT cert)
X509_free(dst_cert); X509_free(dst_cert);
return NULL; return NULL;
} }
err = X509_sign(dst_cert, CA_key, EVP_sha1()); err = X509_sign(dst_cert, CA_key, EVP_sha256());
if(!err){ if(!err){
X509_free(dst_cert); X509_free(dst_cert);
return NULL; return NULL;