signing keys are generated by default

diff --git a/src/tpmtool.c b/src/tpmtool.c
index 1a84e1cabd9f0b41e410095461cadaccb06cad27..edd219a056c0f5525acdccbc00d77d576193b2bc 100644 (file)
--- a/src/tpmtool.c
+++ b/src/tpmtool.c
@@ -97,7 +97,7 @@ cmd_parser (int argc, char **argv)
 
   if (HAVE_OPT(REGISTER))
     genflags |= GNUTLS_TPM_REGISTER_KEY;
-  if (HAVE_OPT(SIGNING))
+  if (!HAVE_OPT(LEGACY))
     genflags |= GNUTLS_TPM_KEY_SIGNING;
   if (HAVE_OPT(USER))
     genflags |= GNUTLS_TPM_KEY_USER;