This looks nice and simple and solves the problem. I agree that using http is ok here since the servlet in question is public anyway. I have also participated in and seen the results of a successful test of this patch working. ACK. ----- Original Message -----

From: "Matthew Harmsen" <mharmsen@redhat.com> To: "pki-devel" <pki-devel@redhat.com>, "Jack Magne" <jmagne@redhat.com> Sent: Friday, May 12, 2017 4:24:14 PM Subject: [PATCH] - CA installation with HSM in FIPS mode fails

Please review the attached patch for:

* Bugizilla Bug #1450143 - CA installation with HSM in FIPS mode fails <https://bugzilla.redhat.com/show_bug.cgi?id=1450143>

Thanks, -- Matt