mumble-voip/mumble — pull request #109 by EarlOfWenc (2012-08-16 13:10:24+00:00)
Title: Replaced last traces of MD5 by SHA-1

MD5 is considered insecure for quite some time now. Fortunately, mumble doesn't use it in its certificate code. However, if a user wants to check a certificate by hand only a md5 hash of the certificate is shown. Although unlikely, an attacker could forge a server certificate with an identical md5 hash to bypass such a check and perform a man in the middle attack by masquerading himself as the genuine server.

This patch replaces MD5 by SHA-1, which is also used in other parts of mumble to verify certificates securely.