From d71f5442471e67beeb94b1398190b9fcdaf37e2f Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Tue, 16 May 2017 19:37:01 +0200
Subject: [PATCH] Sign with sha256

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
---
 roles/fas_server/templates/fas.cfg.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/fas_server/templates/fas.cfg.j2 b/roles/fas_server/templates/fas.cfg.j2
index a2649ad3b3..513c6a6b59 100644
--- a/roles/fas_server/templates/fas.cfg.j2
+++ b/roles/fas_server/templates/fas.cfg.j2
@@ -235,7 +235,7 @@ gencert = "{{ gen_cert }}"
 
 makeexec = "/usr/bin/make"
 openssl_lockdir = "/var/lock/fedora-ca"
-openssl_digest = "md5"
+openssl_digest = "sha256"
 openssl_expire = 15552000 # 60*60*24*180 = 6 months
 openssl_ca_dir = "/var/lib/fedora-ca"
 openssl_ca_newcerts = "/var/lib/fedora-ca/newcerts"