summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--lib/leap_cli/commands/ca.rb6
1 files changed, 3 insertions, 3 deletions
diff --git a/lib/leap_cli/commands/ca.rb b/lib/leap_cli/commands/ca.rb
index 4304c0d..ff24058 100644
--- a/lib/leap_cli/commands/ca.rb
+++ b/lib/leap_cli/commands/ca.rb
@@ -131,11 +131,11 @@ module LeapCli; module Commands
# for keyusage, openvpn server certs can have keyEncipherment or keyAgreement. I am not sure which is preferable.
# going with keyAgreement for now.
#
+ # digest options: SHA512, SHA1
+ #
def server_signing_profile(node)
{
- #"digest" => "SHA512",
- "digest" => "SHA256"
- #"digest" => "SHA1",
+ "digest" => "SHA256",
"extensions" => {
"keyUsage" => {
"usage" => ["digitalSignature", "keyAgreement"]