diff options
| -rw-r--r-- | lib/leap_cli/commands/ca.rb | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/lib/leap_cli/commands/ca.rb b/lib/leap_cli/commands/ca.rb index 4304c0d..ff24058 100644 --- a/lib/leap_cli/commands/ca.rb +++ b/lib/leap_cli/commands/ca.rb @@ -131,11 +131,11 @@ module LeapCli; module Commands # for keyusage, openvpn server certs can have keyEncipherment or keyAgreement. I am not sure which is preferable. # going with keyAgreement for now. # + # digest options: SHA512, SHA1 + # def server_signing_profile(node) { - #"digest" => "SHA512", - "digest" => "SHA256" - #"digest" => "SHA1", + "digest" => "SHA256", "extensions" => { "keyUsage" => { "usage" => ["digitalSignature", "keyAgreement"] |