swtpm_cert: Sign cert using SHA256

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>

diff --git a/src/swtpm_cert/ek-cert.c b/src/swtpm_cert/ek-cert.c
index f2b456d7a79e7d0d7f0c4902a34cd0e28f101dd9..a16a049b644cf04df455a68bbadedb4fa798bea1 100644 (file)
--- a/src/swtpm_cert/ek-cert.c
+++ b/src/swtpm_cert/ek-cert.c
@@ -946,7 +946,7 @@ if (_err != GNUTLS_E_SUCCESS) {             \
                        gnutls_strerror(err))
 
     /* sign cert */
-    err = gnutls_x509_crt_sign(crt, sigcert, sigkey);
+    err = gnutls_x509_crt_sign2(crt, sigcert, sigkey, GNUTLS_DIG_SHA256, 0);
     CHECK_GNUTLS_ERROR(err, "Could not sign the CRT: %s\n",
                        gnutls_strerror(err))