[pki-devel][PATCH] 0086-Resolve-pkispawn-does-not-change-default-ecc-key-siz.patch
- First Post
- Replies
- Stats
-
Go to
- ----- 2024 -----
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
Simple patch will provide a fix to this issue.
Attachments:
- 0086-Resolve-pkispawn-does-not-change-default-ecc-key-siz.patch (text/x-patch — 2.4 KB)
On 12/08/2016 05:42 PM, John Magne wrote:
Simple patch will provide a fix to this issue.
_______________________________________________
Pki-devel mailing list
Pki-devel(a)redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel
Tested original code to confirm incorrect ECC signing curve; tested
patched code to confirm correct ECC signing curve.
ACK
ACKED, by mharmsen, thanks!
Pushed to master:
commit ae350a3d4e0ae9b82fa44ebdfa37654f0083b4c1
Author: Jack Magne <jmagne(a)dhcp-16-206.sjc.redhat.com>
Date: Thu Dec 8 16:35:20 2016 -0800
Resolve: pkispawn does not change default ecc key size from nistp256 when nistp384 is
specified in spawn config
Ticket #2552.
This fix turned out simple. The client was correctly setting the required data, but it
was putting the curveName in the
"keySize" field of the SystemCertData object sent to the back end. The
configuration routine was trying to find the name in the "curveName" field when
its really in the "keySize" field. This issue is restricted to the ECC case. It
is fine to simply fix this in the server, since the "keySize" is a string anyway
and it makes decent sense.
Closing ticket #2552
----- Original Message -----
From: "Matthew Harmsen" <mharmsen(a)redhat.com>
To: "John Magne" <jmagne(a)redhat.com>, "pki-devel"
<pki-devel(a)redhat.com>
Sent: Thursday, December 8, 2016 5:36:24 PM
Subject: Re: [Pki-devel] [pki-devel][PATCH]
0086-Resolve-pkispawn-does-not-change-default-ecc-key-siz.patch
On 12/08/2016 05:42 PM, John Magne wrote:
> Simple patch will provide a fix to this issue.
>
>
> _______________________________________________
> Pki-devel mailing list
> Pki-devel(a)redhat.com
> https://www.redhat.com/mailman/listinfo/pki-devel
Tested original code to confirm incorrect ECC signing curve; tested
patched code to confirm correct ECC signing curve.
ACK
2699
days inactive
2699
days old
2 comments
2 participants
tags (0)
participants (2)
-
John Magne -
Matthew Harmsen