summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorCykesiopka <cykesiopka.bmo@gmail.com>2014-05-29 21:52:13 +0200
committerCykesiopka <cykesiopka.bmo@gmail.com>2014-05-29 21:52:13 +0200
commit798ad9def8951157a0dbfc0d4bd7324832da2b59 (patch)
treef5be68cbd75c9440efc6c9347c4e8cec72ced580
parentb0dc1b6f2fcdcb4ada7c2e89aab7629a2bbc99ee (diff)
downloadnss-hg-798ad9def8951157a0dbfc0d4bd7324832da2b59.tar.gz
Bug 1016567 - Make SECU_PrintFingerprints print SHA-256 instead of MD5 v1, r=emaldona
-rw-r--r--cmd/lib/secutil.c10
1 files changed, 5 insertions, 5 deletions
diff --git a/cmd/lib/secutil.c b/cmd/lib/secutil.c
index 02570103a..0767be981 100644
--- a/cmd/lib/secutil.c
+++ b/cmd/lib/secutil.c
@@ -2464,19 +2464,19 @@ loser:
int
SECU_PrintFingerprints(FILE *out, SECItem *derCert, char *m, int level)
{
- unsigned char fingerprint[20];
+ unsigned char fingerprint[SHA256_LENGTH];
char *fpStr = NULL;
int err = PORT_GetError();
SECStatus rv;
SECItem fpItem;
- /* print MD5 fingerprint */
+ /* Print SHA-256 fingerprint */
memset(fingerprint, 0, sizeof fingerprint);
- rv = PK11_HashBuf(SEC_OID_MD5,fingerprint, derCert->data, derCert->len);
+ rv = PK11_HashBuf(SEC_OID_SHA256, fingerprint, derCert->data, derCert->len);
fpItem.data = fingerprint;
- fpItem.len = MD5_LENGTH;
+ fpItem.len = SHA256_LENGTH;
fpStr = CERT_Hexify(&fpItem, 1);
- SECU_Indent(out, level); fprintf(out, "%s (MD5):", m);
+ SECU_Indent(out, level); fprintf(out, "%s (SHA-256):", m);
if (SECU_GetWrapEnabled()) {
fprintf(out, "\n");
SECU_Indent(out, level+1);