diff options
| author | Ade Lee <alee@redhat.com> | 2017-05-25 16:31:45 -0400 |
|---|---|---|
| committer | Ade Lee <alee@redhat.com> | 2017-05-26 00:00:07 -0400 |
| commit | 5438e24e022c4c169ff9b5c6325e5ec0023d4caa (patch) | |
| tree | 1f38b1336540bc49460e72ff6739eac7e4efebc6 | |
| parent | 64233b8f26a3f87786fa0e0d641a5a02116ebece (diff) | |
| download | pki-5438e24e022c4c169ff9b5c6325e5ec0023d4caa.tar.gz pki-5438e24e022c4c169ff9b5c6325e5ec0023d4caa.tar.xz pki-5438e24e022c4c169ff9b5c6325e5ec0023d4caa.zip | |
Set encryption flag for generated keys
The key record for keys generated in the keygen servlets
was not updated to reflect whether or not the server was set up
to do encryption/key wrapping. This patch corrects this
oversight.
Bugzilla BZ# 1455617
Change-Id: I31daece8b93a0ad58cb595e6a23fe8705f338024
| -rw-r--r-- | base/kra/src/com/netscape/kra/AsymKeyGenService.java | 2 | ||||
| -rw-r--r-- | base/kra/src/com/netscape/kra/NetkeyKeygenService.java | 2 | ||||
| -rw-r--r-- | base/kra/src/com/netscape/kra/SymKeyGenService.java | 2 |
3 files changed, 3 insertions, 3 deletions
diff --git a/base/kra/src/com/netscape/kra/AsymKeyGenService.java b/base/kra/src/com/netscape/kra/AsymKeyGenService.java index ea1d0ccdd..1e38b4828 100644 --- a/base/kra/src/com/netscape/kra/AsymKeyGenService.java +++ b/base/kra/src/com/netscape/kra/AsymKeyGenService.java @@ -197,7 +197,7 @@ public class AsymKeyGenService implements IService { } try { - record.setWrappingParams(params, false); + record.setWrappingParams(params, allowEncDecrypt_archival); } catch (Exception e) { auditAsymKeyGenRequestProcessed(auditSubjectID, ILogger.FAILURE, request.getRequestId(), clientKeyId, null, "Failed to store wrapping params"); diff --git a/base/kra/src/com/netscape/kra/NetkeyKeygenService.java b/base/kra/src/com/netscape/kra/NetkeyKeygenService.java index 8383e895e..96d7aae43 100644 --- a/base/kra/src/com/netscape/kra/NetkeyKeygenService.java +++ b/base/kra/src/com/netscape/kra/NetkeyKeygenService.java @@ -477,7 +477,7 @@ public class NetkeyKeygenService implements IService { return false; } - rec.setWrappingParams(params, false); + rec.setWrappingParams(params, allowEncDecrypt_archival); CMS.debug("NetkeyKeygenService: before addKeyRecord"); rec.set(KeyRecord.ATTR_ID, serialNo); diff --git a/base/kra/src/com/netscape/kra/SymKeyGenService.java b/base/kra/src/com/netscape/kra/SymKeyGenService.java index a4613c285..578b1ffeb 100644 --- a/base/kra/src/com/netscape/kra/SymKeyGenService.java +++ b/base/kra/src/com/netscape/kra/SymKeyGenService.java @@ -221,7 +221,7 @@ public class SymKeyGenService implements IService { } try { - rec.setWrappingParams(params, false); + rec.setWrappingParams(params, allowEncDecrypt_archival); } catch (Exception e) { mKRA.log(ILogger.LL_FAILURE, "Failed to store wrapping parameters: " + e); |