From fe0e328c716687ece62533629b19284b224caa87 Mon Sep 17 00:00:00 2001
From: Markus Tacker <Markus.Tacker@NordicSemi.no>
Date: Wed, 25 Nov 2020 11:21:15 +0100
Subject: [PATCH] feat(device): use ECC ciphers

See https://github.com/bifravst/bifravst/issues/202
---
 cli/jitp/createDeviceCertificate.ts | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/cli/jitp/createDeviceCertificate.ts b/cli/jitp/createDeviceCertificate.ts
index 9879ab7d..50bae375 100644
--- a/cli/jitp/createDeviceCertificate.ts
+++ b/cli/jitp/createDeviceCertificate.ts
@@ -38,7 +38,14 @@ export const createDeviceCertificate = async ({
 
 	await run({
 		command: 'openssl',
-		args: ['genrsa', '-out', deviceFiles.key, '2048'],
+		args: [
+			'ecparam',
+			'-out',
+			deviceFiles.key,
+			'-name',
+			'prime256v1',
+			'-genkey',
+		],
 		log: debug,
 	})