diff --git a/tools/make_key b/tools/make_key
index 6d1ed4717..a6cf49c0d 100755
--- a/tools/make_key
+++ b/tools/make_key
@@ -51,7 +51,7 @@ read -p "Enter password for '$1' (blank for none; password will be visible): " \
 
 if [ "${3}" = "rsa" -o "$#" -eq 2 ]; then
   ( openssl genrsa -f4 2048 | tee ${one} > ${two} ) &
-  hash="-sha1"
+  hash="-sha256"
 elif [ "${3}" = "ec" ]; then
   ( openssl ecparam -name prime256v1 -genkey -noout | tee ${one} > ${two} ) &
   hash="-sha256"