2048 and sha1 default.

diff --git a/src/switch_core_cert.c b/src/switch_core_cert.c
index b2620368f4a4015f0d9453a03338a4fb72b80599..1ff065354c67f3b3554cc8466787cb6118db7a5d 100644 (file)
--- a/src/switch_core_cert.c
+++ b/src/switch_core_cert.c
@@ -267,7 +267,7 @@ SWITCH_DECLARE(int) switch_core_gen_certs(const char *prefix)
                
        //bio_err=BIO_new_fp(stderr, BIO_NOCLOSE);
                
-       mkcert(&x509, &pkey, 512, 0, 365);
+       mkcert(&x509, &pkey, 2048, 0, 365);
 
        //RSA_print_fp(stdout, pkey->pkey.rsa, 0);
        //X509_print_fp(stdout, x509);
@@ -390,7 +390,7 @@ static int mkcert(X509 **x509p, EVP_PKEY **pkeyp, int bits, int serial, int days
        add_ext(x, NID_netscape_comment, "Self-Signed CERT for DTLS");
 
 
-       if (!X509_sign(x, pk, EVP_md5()))
+       if (!X509_sign(x, pk, EVP_sha1()))
                goto err;
 
        *x509p=x;