fixes for tests to pass with FIPS compiler

* use P256 ECDSA key since P224 is not supported
* regen test certs to be 2048bits
This commit is contained in:
Ryan Phillips
2019-10-30 10:10:11 -05:00
parent 5e468a49de
commit f87da3fdfa
4 changed files with 174 additions and 106 deletions

View File

@@ -272,7 +272,7 @@ type csrBuilder struct {
}
func makeFancyTestCsr(b csrBuilder) *capi.CertificateSigningRequest {
pk, err := ecdsa.GenerateKey(elliptic.P224(), insecureRand)
pk, err := ecdsa.GenerateKey(elliptic.P256(), insecureRand)
if err != nil {
panic(err)
}