+--- crypto/pkcs7/pk7_smime.c 2009-03-15 21:36:02.000000000 +0800\r
++++ crypto/pkcs7/pk7_smime.c 2011-09-13 14:11:36.019454700 +0800\r
+@@ -88,7 +88,10 @@\r
+ if (!PKCS7_content_new(p7, NID_pkcs7_data))\r
+ goto err;\r
+ \r
+- if (!(si = PKCS7_add_signature(p7,signcert,pkey,EVP_sha1()))) {\r
++ /* \r
++ NOTE: Update to SHA-256 digest algorithm for UEFI version.\r
++ */\r
++ if (!(si = PKCS7_add_signature(p7,signcert,pkey,EVP_sha256()))) {\r
+ PKCS7err(PKCS7_F_PKCS7_SIGN,PKCS7_R_PKCS7_ADD_SIGNATURE_ERROR);\r
+ goto err;\r
+ }\r