ACKED, by mharmsen, thanks! Pushed to master:
commit ae350a3d4e0ae9b82fa44ebdfa37654f0083b4c1 Author: Jack Magne <[email protected]> Date: Thu Dec 8 16:35:20 2016 -0800 Resolve: pkispawn does not change default ecc key size from nistp256 when nistp384 is specified in spawn config Ticket #2552. This fix turned out simple. The client was correctly setting the required data, but it was putting the curveName in the "keySize" field of the SystemCertData object sent to the back end. The configuration routine was trying to find the name in the "curveName" field when its really in the "keySize" field. This issue is restricted to the ECC case. It is fine to simply fix this in the server, since the "keySize" is a string anyway and it makes decent sense. Closing ticket #2552 ----- Original Message ----- > From: "Matthew Harmsen" <[email protected]> > To: "John Magne" <[email protected]>, "pki-devel" <[email protected]> > Sent: Thursday, December 8, 2016 5:36:24 PM > Subject: Re: [Pki-devel] [pki-devel][PATCH] > 0086-Resolve-pkispawn-does-not-change-default-ecc-key-siz.patch > > On 12/08/2016 05:42 PM, John Magne wrote: > > Simple patch will provide a fix to this issue. > > > > > > _______________________________________________ > > Pki-devel mailing list > > [email protected] > > https://www.redhat.com/mailman/listinfo/pki-devel > > Tested original code to confirm incorrect ECC signing curve; tested > patched code to confirm correct ECC signing curve. > > ACK > > _______________________________________________ Pki-devel mailing list [email protected] https://www.redhat.com/mailman/listinfo/pki-devel
