ACKED, by mharmsen, thanks! Pushed to master: commit ae350a3d4e0ae9b82fa44ebdfa37654f0083b4c1 Author: Jack Magne <jmagne@dhcp-16-206.sjc.redhat.com> Date: Thu Dec 8 16:35:20 2016 -0800 Resolve: pkispawn does not change default ecc key size from nistp256 when nistp384 is specified in spawn config Ticket #2552. This fix turned out simple. The client was correctly setting the required data, but it was putting the curveName in the "keySize" field of the SystemCertData object sent to the back end. The configuration routine was trying to find the name in the "curveName" field when its really in the "keySize" field. This issue is restricted to the ECC case. It is fine to simply fix this in the server, since the "keySize" is a string anyway and it makes decent sense. Closing ticket #2552 ----- Original Message -----

From: "Matthew Harmsen" <mharmsen@redhat.com> To: "John Magne" <jmagne@redhat.com>, "pki-devel" <pki-devel@redhat.com> Sent: Thursday, December 8, 2016 5:36:24 PM Subject: Re: [Pki-devel] [pki-devel][PATCH] 0086-Resolve-pkispawn-does-not-change-default-ecc-key-siz.patch

On 12/08/2016 05:42 PM, John Magne wrote:

...

Simple patch will provide a fix to this issue.

_______________________________________________ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel

Tested original code to confirm incorrect ECC signing curve; tested patched code to confirm correct ECC signing curve.

ACK