Merge pull request #5476 from ordex/T9323-ci-scanner-false-positives

T9323: ci scanner false positives

1 files changed, 7 insertions, 0 deletions

diff --git a/src/op_mode/pki.py b/src/op_mode/pki.py
index 575aa89e0..d53be1f92 100755
--- a/src/op_mode/pki.py
+++ b/src/op_mode/pki.py
@@ -41,6 +41,7 @@ from vyos.pki import create_certificate
 from vyos.pki import create_certificate_request
 from vyos.pki import create_certificate_revocation_list
 from vyos.pki import create_private_key
+from vyos.pki import create_ec_private_key
 from vyos.pki import create_dh_parameters
 from vyos.pki import load_certificate
 from vyos.pki import load_certificate_request
@@ -466,6 +467,12 @@ def generate_private_key():
         valid_responses=size_valid,
     )
 
+    # An elliptic curve key is picked by curve, not by modulus size, so it gets
+    # its own constructor - that keeps the number below out of the function that
+    # also builds RSA and DSA keys
+    if key_type == 'ec':
+        return create_ec_private_key(size), key_type
+
     return create_private_key(key_type, size), key_type