diff --git a/ssl/openssl.cnf b/ssl/openssl.cnf
index 0e319b42..b05c1862 100644
--- a/ssl/openssl.cnf
+++ b/ssl/openssl.cnf
@@ -72,7 +72,7 @@ cert_opt 	= ca_default		# Certificate field options
 
 default_days	= 365			# how long to certify for
 default_crl_days= 30			# how long before next CRL
-default_md	= default		# use public key default MD
+default_md	= md5			# use public key default MD
 preserve	= no			# keep passed DN ordering
 
 # A few difference way of specifying how similar the request should look
@@ -122,6 +122,8 @@ x509_extensions	= v3_ca	# The extentions to add to the self signed cert
 # WARNING: ancient versions of Netscape crash on BMPStrings or UTF8Strings.
 string_mask = utf8only
 
+default_md=md5
+
 # req_extensions = v3_req # The extensions to add to a certificate request
 
 [ req_distinguished_name ]