feat(self-signed): use elliptic curve key

See https://xcp-ng.org/forum/topic/4662/installation-expecting-an-rsa-key-any-plans-to-support-elliptic-curve-keys
2022-05-27 13:00:14 +02:00
1 changed files with 15 additions and 1 deletions
--- a/@xen-orchestra/self-signed/index.js
+++ b/@xen-orchestra/self-signed/index.js
@@ -8,7 +8,21 @@ exports.genSelfSignedCert = async ({ days = 360 } = {}) =>
  new Promise((resolve, reject) => {
    execFile(
      'openssl',
-      ['req', '-batch', '-new', '-x509', '-days', String(days), '-nodes', '-newkey', 'rsa:2048', '-keyout', '-'],
+      [
+        'req',
+        '-batch',
+        '-new',
+        '-x509',
+        '-days',
+        String(days),
+        '-nodes',
+        '-newkey',
+        'ec',
+        '-pkeyopt',
+        'ec_paramgen_curve:secp384r1',
+        '-keyout',
+        '-',
+      ],
      (error, stdout) => {
        if (error != null) {
          return reject(error)