This is an automated email from the git hooks/post-receive script.
Git pushed a commit to branch master
in repository ffmpeg.
The following commit(s) were added to refs/heads/master by this push:
new 477bf79b06 avformat/tls_openssl: use SHA-256 instead of SHA-1 for
self-signed cert
477bf79b06 is described below
commit 477bf79b06f1d3ec2ce87c8a3dc1f767b0151e8d
Author: Nariman-Sayed <[email protected]>
AuthorDate: Sat Feb 21 23:37:36 2026 +0200
Commit: michaelni <[email protected]>
CommitDate: Thu Feb 26 22:25:29 2026 +0000
avformat/tls_openssl: use SHA-256 instead of SHA-1 for self-signed cert
SHA-1 is deprecated and considered cryptographically weak.
Replace EVP_sha1() with EVP_sha256() when signing self-generated
certificates to comply with modern security standards.
---
libavformat/tls_openssl.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/libavformat/tls_openssl.c b/libavformat/tls_openssl.c
index 65d486567d..780874f8fe 100644
--- a/libavformat/tls_openssl.c
+++ b/libavformat/tls_openssl.c
@@ -312,7 +312,7 @@ static int openssl_gen_certificate(EVP_PKEY *pkey, X509
**cert, char **fingerpri
goto einval_end;
}
- if (!X509_sign(*cert, pkey, EVP_sha1())) {
+ if (!X509_sign(*cert, pkey, EVP_sha256())) {
av_log(NULL, AV_LOG_ERROR, "TLS: Failed to sign certificate, %s\n",
ERR_error_string(ERR_get_error(), NULL));
goto einval_end;
}
_______________________________________________
ffmpeg-cvslog mailing list -- [email protected]
To unsubscribe send an email to [email protected]
