bin/sign: Force use of v00 certificates.

[ssh-ca] / bin / sign

diff --git a/bin/sign b/bin/sign
index 833c2a1a7a57ec29cc55368f8e5bfed679a0127c..1d5f306c18e464c5260d1371f54c28c8d91d38fc 100755 (executable)
--- a/bin/sign
+++ b/bin/sign
@@ -53,7 +53,7 @@ while read line <&3; do
   for kt in $rawkeytypes; do
     if [ ! -f host/$host-$kt.pub ]; then continue; fi
     cp host/$host-$kt.pub publish.new/
   for kt in $rawkeytypes; do
     if [ ! -f host/$host-$kt.pub ]; then continue; fi
     cp host/$host-$kt.pub publish.new/

-    ssh-keygen -q -sca/ca-$kt \
+    ssh-keygen -q -tv00 -sca/ca-$kt \

       -h -I"$cacomment:$host.$domain" -n$names \
       -V$validity \
       publish.new/$host-$kt.pub
       -h -I"$cacomment:$host.$domain" -n$names \
       -V$validity \
       publish.new/$host-$kt.pub