Default to using SHA-1 with ECDSA in X.509 signatures

1 files changed, 5 insertions, 0 deletions

diff --git a/src/cert/x509/x509_ca.cpp b/src/cert/x509/x509_ca.cpp
index f4edcc479..82f854649 100644
--- a/src/cert/x509/x509_ca.cpp
+++ b/src/cert/x509/x509_ca.cpp
@@ -258,6 +258,11 @@ PK_Signer* choose_sig_format(const Private_Key& key,
       padding = "EMSA1(SHA-160)";
       format = DER_SEQUENCE;
       }
+   else if(algo_name == "ECDSA")
+      {
+      padding = "EMSA1_BSI(SHA-160)";
+      format = IEEE_1363;
+      }
    else
       throw Invalid_Argument("Unknown X.509 signing key type: " + algo_name);