<html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> This version addressed one missed comment regarding one common function to set ciphers. thanks, Christina <div class="moz-cite-prefix">On 07/13/2015 05:00 PM, Christina Fu wrote: </div> <blockquote cite="mid:55A4512E.1020308@redhat.com" type="cite">Thank you jack for the review. Also, thanks to Matt for helping out with the console dependency issue. Please see the attached revision that addressed the comments. It has been tested to work on all three types of clients. thanks, Christina On 07/10/2015 03:59 PM, John Magne wrote: <blockquote type="cite">Functionality looks good, just a few minor suggestions: 1. This code: + + static final Integer[] clientECCciphers = { + SSLSocket.TLS_ECDH_RSA_WITH_AES_128_CBC_SHA, + SSLSocket.TLS_ECDH_RSA_WITH_AES_256_CBC_SHA, + SSLSocket.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, + SSLSocket.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, + SSLSocket.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, + SSLSocket.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, + SSLSocket.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 + }; + ArrayList<Integer> eccCiphers = new ArrayList(Arrays.asList(clientECCciphers)); For the ArrayList declaration: Eclipse is complaining about unsafe conversions, it suggests something like: ArrayList<Integer> eccCiphers = new ArrayList<Integer>(Arrays.asList(clientECCciphers)); Also, I think we can declare this with a more general Collection such as "List" and leave the ArrayList implementation, since that appears to be the convention. Also, due to the final suggestion, we can make List static, since nothing changes and one would do. 2. I see the similar code to instantiate all this data and ensure the ciphers are legit is copied around 3 times. I think we can move this stuff to a common class and have everyone use it, so if it needs to change it will only change in one place. ----- Original Message ----- <blockquote type="cite">From: "Christina Fu" <a class="moz-txt-link-rfc2396E" href="mailto:cfu@redhat.com"><cfu@redhat.com></a> To: <a class="moz-txt-link-abbreviated" href="mailto:pki-devel@redhat.com">pki-devel@redhat.com</a> Sent: Friday, July 10, 2015 11:51:08 AM Subject: [Pki-devel] [PATCH] pki-cfu-0084-Ticket-1459-Dogtag-clients-cannot-connect-when-CS-is.patch These patches address the following ticket: <a class="moz-txt-link-freetext" href="https://fedorahosted.org/pki/ticket/1459">https://fedorahosted.org/pki/ticket/1459</a> Dogtag clients cannot connect when CS is configured with ECC the first patch is just to clean up the tabs in the constructor of the file JSSConnection in preparation for code changes : pki-cfu-0083-ecc-Console-1.-clean-up-the-tabs-in-the-JSSConnectio.patch The second patch addresses the ECC ssl connection issue from the - java console - cli clients - HttpClient They have been tested to work with ECC ca. thanks, Christina _______________________________________________ Pki-devel mailing list <a class="moz-txt-link-abbreviated" href="mailto:Pki-devel@redhat.com">Pki-devel@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-devel">https://www.redhat.com/mailman/listinfo/pki-devel</a> </blockquote> </blockquote> <fieldset class="mimeAttachmentHeader"></fieldset> <pre wrap="">_______________________________________________ Pki-devel mailing list <a class="moz-txt-link-abbreviated" href="mailto:Pki-devel@redhat.com">Pki-devel@redhat.com</a> <a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/pki-devel">https://www.redhat.com/mailman/listinfo/pki-devel</a></pre> </blockquote> </body> </html>