--- /usr/bin/cert-sh-functions.orig	2015-11-12 21:59:00.000000000 +0300
+++ /usr/bin/cert-sh-functions	2015-11-26 13:01:45.853736601 +0300
@@ -144,7 +144,7 @@
     ssl_check_cert "$1" && return
 	_ssl_check_args "$@" || return 1
 
-	if ! "$OPENSSL" x509 -req -days "${2:-$SSL_CERT_DAYS}" -in "$SSL_CSRDIR/$1.csr" -signkey "$SSL_KEYDIR/$1.key" -out "$SSL_CERTDIR/$1.cert" >/dev/null 2>&1; then
+	if ! "$OPENSSL" x509 -req -sha256 -days "${2:-$SSL_CERT_DAYS}" -in "$SSL_CSRDIR/$1.csr" -signkey "$SSL_KEYDIR/$1.key" -out "$SSL_CERTDIR/$1.cert" >/dev/null 2>&1; then
 		_ssl_error 'Unable to create certificate'
 		return 1
 	fi