explicitly set digest in server cert generation

1 files changed, 4 insertions, 1 deletions

diff --git a/lib/leap_cli/commands/ca.rb b/lib/leap_cli/commands/ca.rb
index 9f1d42e..4304c0d 100644
--- a/lib/leap_cli/commands/ca.rb
+++ b/lib/leap_cli/commands/ca.rb
@@ -109,7 +109,7 @@ module LeapCli; module Commands
     key = read_file!(key)
     openssl_cert = OpenSSL::X509::Certificate.new(crt)
     cert = CertificateAuthority::Certificate.from_openssl(openssl_cert)
-    cert.key_material.private_key = OpenSSL::PKey::RSA.new(key)  # second argument is password, if set
+    cert.key_material.private_key = OpenSSL::PKey::RSA.new(key, nil)  # second argument is password, if set
     return cert
   end
 
@@ -133,6 +133,9 @@ module LeapCli; module Commands
   #
   def server_signing_profile(node)
     {
+      #"digest" => "SHA512",
+      "digest" => "SHA256"
+      #"digest" => "SHA1",
       "extensions" => {
         "keyUsage" => {
           "usage" => ["digitalSignature", "keyAgreement"]