diff --git a/script/codesign/codesign.cnf b/script/codesign/codesign.cnf
index aad66e16c7..e39b379570 100644
--- a/script/codesign/codesign.cnf
+++ b/script/codesign/codesign.cnf
@@ -1,7 +1,7 @@
 [req]
 default_bits = 4096
 encrypt_key = no
-default_md = 512
+default_md = sha512
 distinguished_name = req_distinguished_name
 prompt = no