Skip to content

Commit 82a7761

Browse files
Pranav GoyalGitHub Enterprise
authored andcommitted
For updating the sha256 algorithm to mitigate ASoC reported vulnerability in container 9333r2 (#589)
1 parent 0b789a5 commit 82a7761

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

internal/keystore/keystore.go

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
/*
2-
© Copyright IBM Corporation 2018, 2023
2+
© Copyright IBM Corporation 2018, 2024
33
44
Licensed under the Apache License, Version 2.0 (the "License");
55
you may not use this file except in compliance with the License.
@@ -147,7 +147,7 @@ func (ks *KeyStore) Import(inputFile, password string) error {
147147

148148
// CreateSelfSignedCertificate creates a self-signed certificate in the keystore
149149
func (ks *KeyStore) CreateSelfSignedCertificate(label, dn, hostname string) error {
150-
out, _, err := command.Run(ks.command, "-cert", "-create", ks.getFipsEnabledFlag(), "-db", ks.Filename, "-pw", ks.Password, "-label", label, "-dn", dn, "-san_dnsname", hostname, "-size 2048 -sig_alg sha256 -eku serverAuth")
150+
out, _, err := command.Run(ks.command, "-cert", "-create", ks.getFipsEnabledFlag(), "-db", ks.Filename, "-pw", ks.Password, "-label", label, "-dn", dn, "-san_dnsname", hostname, "-size 2048 -sig_alg sha512 -eku serverAuth")
151151
if err != nil {
152152
return fmt.Errorf("error running \"%v -cert -create\": %v %s", ks.command, err, out)
153153
}

0 commit comments

Comments
 (0)