SHA256 is the default hash algorithm in certtool.

diff --git a/src/certtool.c b/src/certtool.c
index dce9c5447e87ade90f36b784f7b11ebf47764fac..f35efbb50c46fc7ac89af2e92feee16f69a50ee2 100644 (file)
--- a/src/certtool.c
+++ b/src/certtool.c
@@ -50,7 +50,7 @@
 #include "certtool-gaa.h"
 #include "certtool-common.h"
 
-#define SIGN_HASH GNUTLS_DIG_SHA1
+#define SIGN_HASH GNUTLS_DIG_SHA256
 
 static void privkey_info_int (gnutls_x509_privkey_t key);
 static void print_crl_info (gnutls_x509_crl_t crl, FILE * out);