Unable to rotate Consul CA after 1st successful rotation

Hello,

I enabled connect in my consul cluster so it had the default consul ca provider.

I rotated it with my custom CA configs, forming a chain to the root CA system. All went smooth.

The second time I try to rotate it. It does not work. It gives below error
`
rpc error making call: error generating CA certificate: x509: requested SignatureAlgorithm does not match private key type
`

This hinders CA rotation as expiration time nears. I verified from my end that the 2nd time I create a new csr and its private key, its an "ec" private key.

Why does this happen? Can someone provide an insight as to what is happening here ?

Version of consul : 1.9.5

Signer is Vault (Intermediate , key type : RSA )

Consul CA (key type : EC ) is getting its CSR signed from this vault