From b6bb32e658347ac150478959c0f15caab0fdea88 Mon Sep 17 00:00:00 2001
From: Andreas Steffen <andreas.steffen@strongswan.org>
Date: Fri, 28 Nov 2014 13:13:47 +0100
Subject: Implemented full BLISS support for IKEv2 public key authentication
 and the pki tool

---
 src/pki/commands/issue.c | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'src/pki/commands/issue.c')

diff --git a/src/pki/commands/issue.c b/src/pki/commands/issue.c
index aaa2c2ff7..c1d4cf8f2 100644
--- a/src/pki/commands/issue.c
+++ b/src/pki/commands/issue.c
@@ -287,6 +287,7 @@ static int issue()
 		}
 		break;
 	}
+
 	if (!cacert)
 	{
 		error = "--cacert is required";
@@ -362,6 +363,11 @@ static int issue()
 	}
 	public->destroy(public);
 
+	if (private->get_type(private) == KEY_BLISS)
+	{
+		/* currently only SHA-512 is supported */
+		digest = HASH_SHA512;
+	}
 	if (hex)
 	{
 		serial = chunk_from_hex(chunk_create(hex, strlen(hex)), NULL);
-- 
cgit v1.2.3