Skip to content

Commit cd7b84c

Browse files
committed
fix: prefer EC to RSA
1 parent 12971a0 commit cd7b84c

File tree

1 file changed

+10
-11
lines changed

1 file changed

+10
-11
lines changed

pyeudiw/tests/x509/test_x509.py

Lines changed: 10 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33

44
from cryptography import x509
55
from cryptography.hazmat.primitives import hashes
6-
from cryptography.hazmat.primitives.asymmetric import rsa
6+
from cryptography.hazmat.primitives.asymmetric import rsa, ec
77
from cryptography.hazmat.primitives.serialization import Encoding
88
from cryptography.x509.oid import NameOID
99

@@ -25,25 +25,24 @@ def gen_chain(
2525
leaf_private_key: rsa.RSAPrivateKey = None
2626
) -> list[bytes]:
2727
# Generate a private key for the CA
28-
ca_private_key = rsa.generate_private_key(
29-
public_exponent=65537,
30-
key_size=2048,
28+
29+
30+
ca_private_key = ec.generate_private_key(
31+
ec.SECP256R1(),
3132
)
3233

3334
# Generate a private key for the intermediate
34-
intermediate_private_key = rsa.generate_private_key(
35-
public_exponent=65537,
36-
key_size=2048,
35+
intermediate_private_key = ec.generate_private_key(
36+
ec.SECP256R1(),
3737
)
3838

3939
# Generate a private key for the leaf
4040

4141
if leaf_private_key is None:
42-
leaf_private_key = rsa.generate_private_key(
43-
public_exponent=65537,
44-
key_size=2048,
42+
leaf_private_key = ec.generate_private_key(
43+
ec.SECP256R1(),
4544
)
46-
45+
4746
# Generate the CA's certificate
4847
ca = (
4948
x509.CertificateBuilder()

0 commit comments

Comments
 (0)