aboutsummaryrefslogtreecommitdiffstats
path: root/src/pki/commands/issue.c
diff options
context:
space:
mode:
authorAndreas Steffen <andreas.steffen@strongswan.org>2014-11-28 13:13:47 +0100
committerAndreas Steffen <andreas.steffen@strongswan.org>2014-11-29 14:51:18 +0100
commitb6bb32e658347ac150478959c0f15caab0fdea88 (patch)
treed1481682d60927c96d23bd0d11faac8e9b0f2a0f /src/pki/commands/issue.c
parent43d92475998f85b977ca98dd8ac81fc630a19000 (diff)
downloadstrongswan-b6bb32e658347ac150478959c0f15caab0fdea88.tar.bz2
strongswan-b6bb32e658347ac150478959c0f15caab0fdea88.tar.xz
Implemented full BLISS support for IKEv2 public key authentication and the pki tool
Diffstat (limited to 'src/pki/commands/issue.c')
-rw-r--r--src/pki/commands/issue.c6
1 files changed, 6 insertions, 0 deletions
diff --git a/src/pki/commands/issue.c b/src/pki/commands/issue.c
index aaa2c2ff7..c1d4cf8f2 100644
--- a/src/pki/commands/issue.c
+++ b/src/pki/commands/issue.c
@@ -287,6 +287,7 @@ static int issue()
}
break;
}
+
if (!cacert)
{
error = "--cacert is required";
@@ -362,6 +363,11 @@ static int issue()
}
public->destroy(public);
+ if (private->get_type(private) == KEY_BLISS)
+ {
+ /* currently only SHA-512 is supported */
+ digest = HASH_SHA512;
+ }
if (hex)
{
serial = chunk_from_hex(chunk_create(hex, strlen(hex)), NULL);