- Create a selfsigned issuer
- Create a CA certificate using the selfsigned issuer. Make sure the algorithm used in ECDSA
- Create an issuer from the above generated CA
- Use CSI driver
Using openssl s_client -connect, its observed that the key is RSA while the cert is ECDSA
[openssl s_client -connect](a:PKEY: rsaEncryption, 2048 (bit); sigalg: ecdsa-with-SHA256)
The CSI driver should create the key as the issuer which is ecdsa in this case