HDDS-588. SelfSignedCertificate#generateCertificate should sign the certificate 
the configured security provider. Contributed by Xiaoyu Yao.


Project: http://git-wip-us.apache.org/repos/asf/hadoop/repo
Commit: http://git-wip-us.apache.org/repos/asf/hadoop/commit/5246b01f
Tree: http://git-wip-us.apache.org/repos/asf/hadoop/tree/5246b01f
Diff: http://git-wip-us.apache.org/repos/asf/hadoop/diff/5246b01f

Branch: refs/heads/HDDS-4
Commit: 5246b01f8420822678a6bb0db8b3ce820164d3fe
Parents: 6f162b2
Author: Ajay Kumar <[email protected]>
Authored: Tue Oct 9 00:28:01 2018 -0700
Committer: Xiaoyu Yao <[email protected]>
Committed: Wed Nov 21 12:13:03 2018 -0800

----------------------------------------------------------------------
 .../hdds/security/x509/certificates/SelfSignedCertificate.java   | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/hadoop/blob/5246b01f/hadoop-hdds/common/src/main/java/org/apache/hadoop/hdds/security/x509/certificates/SelfSignedCertificate.java
----------------------------------------------------------------------
diff --git 
a/hadoop-hdds/common/src/main/java/org/apache/hadoop/hdds/security/x509/certificates/SelfSignedCertificate.java
 
b/hadoop-hdds/common/src/main/java/org/apache/hadoop/hdds/security/x509/certificates/SelfSignedCertificate.java
index fef7ac3..f221246 100644
--- 
a/hadoop-hdds/common/src/main/java/org/apache/hadoop/hdds/security/x509/certificates/SelfSignedCertificate.java
+++ 
b/hadoop-hdds/common/src/main/java/org/apache/hadoop/hdds/security/x509/certificates/SelfSignedCertificate.java
@@ -103,8 +103,8 @@ public final class SelfSignedCertificate {
 
 
     ContentSigner contentSigner =
-        new JcaContentSignerBuilder(
-            config.getSignatureAlgo()).build(key.getPrivate());
+        new JcaContentSignerBuilder(config.getSignatureAlgo())
+            .setProvider(config.getProvider()).build(key.getPrivate());
 
     // Please note: Since this is a root certificate we use "ONE" as the
     // serial number. Also note that skip enforcing locale or UTC. We are


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to