OpenSSL 3 fixes: use SHA256 instead of SHA1

OpenSSL 3.x does not support signing certificates with SHA1 by default.
Use SHA256 instead.

diff --git a/test/regress_openssl.c b/test/regress_openssl.c
index 1bf0b50dd842494f83d5c6a5dc1d02d6ed2db599..f74cae1ce6a8c3305f3cfe7cea7ac5ca59529211 100644 (file)
--- a/test/regress_openssl.c
+++ b/test/regress_openssl.c
@@ -103,7 +103,7 @@ ssl_getcert(EVP_PKEY *key)
        now += 3600;
        X509_time_adj(X509_getm_notAfter(x509), 0, &now);
        X509_set_pubkey(x509, key);
-       tt_assert(0 != X509_sign(x509, key, EVP_sha1()));
+       tt_assert(0 != X509_sign(x509, key, EVP_sha256()));
 
        return x509;
 end: