From 5b888c525f0a0adf7c31503c51dfd7e2d5c28777 Mon Sep 17 00:00:00 2001 From: elijah Date: Fri, 2 Nov 2012 19:15:21 -0700 Subject: explicitly set digest in server cert generation --- lib/leap_cli/commands/ca.rb | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'lib/leap_cli/commands/ca.rb') diff --git a/lib/leap_cli/commands/ca.rb b/lib/leap_cli/commands/ca.rb index 9f1d42e..4304c0d 100644 --- a/lib/leap_cli/commands/ca.rb +++ b/lib/leap_cli/commands/ca.rb @@ -109,7 +109,7 @@ module LeapCli; module Commands key = read_file!(key) openssl_cert = OpenSSL::X509::Certificate.new(crt) cert = CertificateAuthority::Certificate.from_openssl(openssl_cert) - cert.key_material.private_key = OpenSSL::PKey::RSA.new(key) # second argument is password, if set + cert.key_material.private_key = OpenSSL::PKey::RSA.new(key, nil) # second argument is password, if set return cert end @@ -133,6 +133,9 @@ module LeapCli; module Commands # def server_signing_profile(node) { + #"digest" => "SHA512", + "digest" => "SHA256" + #"digest" => "SHA1", "extensions" => { "keyUsage" => { "usage" => ["digitalSignature", "keyAgreement"] -- cgit v1.2.3