tree dca0712b348fd22f74743964badfb87801541a05
parent c6f02fb929f175e4fbd164bf3573ca420316903e
author Christopher Faulet <cfaulet@qualys.com> 1444382103 +0200
committer Willy Tarreau <w@1wt.eu> 1444385592 +0200
encoding latin1

MINOR: ssl: Add support for EC for the CA used to sign generated certificates

This is done by adding EVP_PKEY_EC type in supported types for the CA private
key when we get the message digest used to sign a generated X509 certificate.
So now, we support DSA, RSA and EC private keys.

And to be sure, when the type of the private key is not directly supported, we
get its default message digest using the function
'EVP_PKEY_get_default_digest_nid'.

We also use the key of the default certificate instead of generated it. So we
are sure to use the same key type instead of always using a RSA key.