Merge tag 'v0.8.4' into debian/latest

Release version 0.8.4

1 files changed, 2 insertions, 1 deletions

diff --git a/lacme-accountd b/lacme-accountd
index 5bc8b5f..05fa227 100755
--- a/lacme-accountd
+++ b/lacme-accountd
@@ -23,7 +23,7 @@ use v5.14.2;
 use strict;
 use warnings;
 
-our $VERSION = '0.8.3';
+our $VERSION = '0.8.4';
 my $PROTOCOL_VERSION = 1;
 my $NAME = 'lacme-accountd';
 
@@ -174,6 +174,7 @@ if ($OPTS{privkey} =~ /\A(file|gpg):(\p{Print}+)\z/) {
     error("$filename: Not a private key") unless $rsa->is_private();
     error("$filename: Invalid key")       unless $rsa->check_key();
     $rsa->use_sha256_hash();
+    $rsa->use_pkcs1_padding(); # JWT RS256 uses PKCS#1 v1.5 signatures
 
     require 'Crypt/OpenSSL/Bignum.pm';
     my ($n, $e) = $rsa->get_key_parameters(); # don't include private params!