The CryptoUtil.setClientCiphers() has been modified to throw
an exception on unsupported cipher.
Pushed to master under trivial rule.
--
Endi S. Dewata
>From 035f37b6416e9b001ff49e06142751b974835a9b Mon Sep 17 00:00:00 2001
From: "Endi S. Dewata" <edew...@redhat.com>
Date: Sun, 19 Mar 2017 20:08:50 +0100
Subject: [PATCH] Fixed error handling in CryptoUtil.setClientCiphers().
The CryptoUtil.setClientCiphers() has been modified to throw
an exception on unsupported cipher.
---
base/util/src/com/netscape/cmsutil/crypto/CryptoUtil.java | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
diff --git a/base/util/src/com/netscape/cmsutil/crypto/CryptoUtil.java b/base/util/src/com/netscape/cmsutil/crypto/CryptoUtil.java
index 70aaa373fc3a9e0ed9d533aaaf61de87912e4d7b..729d71d63edc84d6681ddd3e5299e877d8ea8250 100644
--- a/base/util/src/com/netscape/cmsutil/crypto/CryptoUtil.java
+++ b/base/util/src/com/netscape/cmsutil/crypto/CryptoUtil.java
@@ -944,7 +944,9 @@ public class CryptoUtil {
for (String cipher : ciphers) {
Integer cipherID = cipherMap.get(cipher);
- if (cipherID == null) continue;
+ if (cipherID == null) {
+ throw new SocketException("Unsupported cipher: " + cipher);
+ }
SSLSocket.setCipherPreferenceDefault(cipherID, true);
}
--
2.9.3
_______________________________________________
Pki-devel mailing list
Pki-devel@redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel
