From 530fa0d569cbe0dc4ddb7fa7184f7864e1779a75 Mon Sep 17 00:00:00 2001
From: Ian Cordasco <ian.cordasco@rackspace.com>
Date: Tue, 9 Jun 2015 22:15:20 -0500
Subject: [PATCH] Generate a SHA-2 certificate for Horizon

SHA-1 certificates are being deprecated and browsers are starting to
issue warnings about their use. We should begin generating SHA-2
certificates for Horizon.

Closes-bug: 1461983
Change-Id: I7f1933680e2859e007f6b8be262852b164f90b33
---
 tasks/horizon_ssl_key_create.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tasks/horizon_ssl_key_create.yml b/tasks/horizon_ssl_key_create.yml
index c2358609..f400fa5a 100644
--- a/tasks/horizon_ssl_key_create.yml
+++ b/tasks/horizon_ssl_key_create.yml
@@ -23,7 +23,7 @@
 
 - name: Create self-signed ssl cert
   command: >
-    openssl req -new -nodes -x509 -subj
+    openssl req -new -nodes -sha256 -x509 -subj
     "/C=US/ST=Texas/L=San Antonio/O=IT/CN={{ horizon_server_name }}"
     -days 3650
     -keyout {{ horizon_ssl_key }}