[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [Pki-devel] [pki-devel][PATCH] 0086-Resolve-pkispawn-does-not-change-default-ecc-key-siz.patch



ACKED, by mharmsen, thanks!

Pushed to master:

commit ae350a3d4e0ae9b82fa44ebdfa37654f0083b4c1
Author: Jack Magne <jmagne dhcp-16-206 sjc redhat com>
Date:   Thu Dec 8 16:35:20 2016 -0800

    Resolve: pkispawn does not change default ecc key size from nistp256 when nistp384 is specified in spawn config
    
    Ticket #2552.
    
    This fix turned out simple. The client was correctly setting the required data, but it was putting the curveName in the
    "keySize" field of the SystemCertData object sent to the back end. The configuration routine was trying to find the name in the "curveName" field when its really in the "keySize" field. This issue is restricted to the ECC case. It is fine to simply fix this in the server, since the "keySize" is a string anyway and it makes decent sense.


Closing ticket #2552



----- Original Message -----
> From: "Matthew Harmsen" <mharmsen redhat com>
> To: "John Magne" <jmagne redhat com>, "pki-devel" <pki-devel redhat com>
> Sent: Thursday, December 8, 2016 5:36:24 PM
> Subject: Re: [Pki-devel] [pki-devel][PATCH] 0086-Resolve-pkispawn-does-not-change-default-ecc-key-siz.patch
> 
> On 12/08/2016 05:42 PM, John Magne wrote:
> > Simple patch will provide a fix to this issue.
> >
> >
> > _______________________________________________
> > Pki-devel mailing list
> > Pki-devel redhat com
> > https://www.redhat.com/mailman/listinfo/pki-devel
> 
> Tested original code to confirm incorrect ECC signing curve; tested
> patched code to confirm correct ECC signing curve.
> 
> ACK
> 
> 


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]