From 84adac255b43d0961528251f60f96f44e11ccda0 Mon Sep 17 00:00:00 2001
From: Marvin Martinson <marvin@pinecrypt.com>
Date: Mon, 23 Aug 2021 09:23:07 +0000
Subject: [PATCH] Make hash value understandable for clients

---
 pinecrypt/client/cli.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pinecrypt/client/cli.py b/pinecrypt/client/cli.py
index c11a34f..2cc9e6f 100644
--- a/pinecrypt/client/cli.py
+++ b/pinecrypt/client/cli.py
@@ -258,6 +258,7 @@ def certidude_enroll(fork, no_wait, kerberos):
                 NotImplemented
 
             builder = CSRBuilder({"common_name": common_name}, self_public_key)
+            builder.hash_algo = bootstrap["certificate"]["hash_algorithm"].replace("-", "").lower()  # sha1, sha256 sha512
             request = builder.build(private_key)
             with open(key_partial, "wb") as f:
                 f.write(asymmetric.dump_private_key(private_key, None))