diff options
| author | Daniel Kahn Gillmor <dkg@fifthhorseman.net> | 2021-05-04 15:08:08 -0400 |
|---|---|---|
| committer | Daniel Kahn Gillmor <dkg@fifthhorseman.net> | 2021-05-04 15:10:44 -0400 |
| commit | f5a1b2537e0f8ca1d9742bff4246a110f6359486 (patch) | |
| tree | b224915484bb821109a2bd07beeb2a29224c46a5 /src | |
| parent | 0d112fb8b1667ecea29b445e89931590d67a93f2 (diff) | |
| download | gnutls-f5a1b2537e0f8ca1d9742bff4246a110f6359486.tar.gz | |
certtool: Align warning about --provable with actual code
If I try to generate an ed25519 key, it is *not* an ECDSA key. But I
see this warning:
0 dkg@host:~$ certtool --generate-privkey --provable --key-type ed25519
Generating a 256 bit EdDSA (Ed25519) private key ...
The --provable parameter cannot be used with ECDSA keys.
1 dkg@host:~$
Looking at the code and documentation, it's clear that --provable only
works for RSA and DSA. This fix aligns the warning message with the
underlying mechanism.
Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
Diffstat (limited to 'src')
| -rw-r--r-- | src/certtool.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/certtool.c b/src/certtool.c index 2f1f367184..3c81155a92 100644 --- a/src/certtool.c +++ b/src/certtool.c @@ -197,7 +197,7 @@ generate_private_key_int(common_info_st * cinfo) if (provable && (!GNUTLS_PK_IS_RSA(key_type) && key_type != GNUTLS_PK_DSA)) { fprintf(stderr, - "The --provable parameter cannot be used with ECDSA keys.\n"); + "The --provable parameter can only be used with RSA and DSA keys.\n"); app_exit(1); } |