server/, keys/: Alternative serialization formats for hashing.

[tripe] / keys / tripe-keys.in

diff --git a/keys/tripe-keys.in b/keys/tripe-keys.in
index f1279ad79eaac0e4d358243a4255cedd6172503b..81d2ff707a38243fca6ff9b555579dbe62e5bcf5 100644 (file)
--- a/keys/tripe-keys.in
+++ b/keys/tripe-keys.in
@@ -244,7 +244,7 @@ def conf_defaults():
                                             'ec': 'ec-param'}[conf['kx']]),
                ('kx-param', lambda: {'dh': '-LS -b3072 -B256',
                                      'ec': '-Cnist-p256'}[conf['kx']]),
-               ('kx-attrs', ''),
+               ('kx-attrs', 'serialization=constlen'),
                ('kx-expire', 'now + 1 year'),
                ('kx-warn-days', '28'),
                ('bulk', 'iiv'),