From 7d20d06825918fbcaaf219e4bb8e0fdfc31c5a8b Mon Sep 17 00:00:00 2001 From: lloyd Date: Sat, 11 Oct 2008 20:55:02 +0000 Subject: Default to using SHA-1 with ECDSA in X.509 signatures --- src/cert/x509/x509_ca.cpp | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/cert/x509/x509_ca.cpp b/src/cert/x509/x509_ca.cpp index f4edcc479..82f854649 100644 --- a/src/cert/x509/x509_ca.cpp +++ b/src/cert/x509/x509_ca.cpp @@ -258,6 +258,11 @@ PK_Signer* choose_sig_format(const Private_Key& key, padding = "EMSA1(SHA-160)"; format = DER_SEQUENCE; } + else if(algo_name == "ECDSA") + { + padding = "EMSA1_BSI(SHA-160)"; + format = IEEE_1363; + } else throw Invalid_Argument("Unknown X.509 signing key type: " + algo_name); -- cgit v1.2.3