summaryrefslogtreecommitdiffstats
path: root/base/common
diff options
context:
space:
mode:
authorChristina Fu <cfu@redhat.com>2015-07-10 11:41:22 -0700
committerChristina Fu <cfu@redhat.com>2015-07-13 18:21:22 -0700
commite62b40b9249d0f0b394275da35fa7c2ee99842b5 (patch)
tree51267f762c56cb74c603c6ddc682982f18d82a13 /base/common
parent8c9e59cfaff9ecda1483c07238ad0b58ea4f5f73 (diff)
downloadpki-e62b40b9249d0f0b394275da35fa7c2ee99842b5.tar.gz
pki-e62b40b9249d0f0b394275da35fa7c2ee99842b5.tar.xz
pki-e62b40b9249d0f0b394275da35fa7c2ee99842b5.zip
Ticket 1459 Dogtag clients cannot connect when CS is configured with ECC
clients are: cli, HttpClient, and java console
Diffstat (limited to 'base/common')
-rw-r--r--base/common/src/com/netscape/certsrv/client/PKIConnection.java4
1 files changed, 4 insertions, 0 deletions
diff --git a/base/common/src/com/netscape/certsrv/client/PKIConnection.java b/base/common/src/com/netscape/certsrv/client/PKIConnection.java
index 1f9b6dff1..85b6c2082 100644
--- a/base/common/src/com/netscape/certsrv/client/PKIConnection.java
+++ b/base/common/src/com/netscape/certsrv/client/PKIConnection.java
@@ -82,6 +82,7 @@ import org.mozilla.jss.ssl.SSLCertificateApprovalCallback;
import org.mozilla.jss.ssl.SSLSocket;
import com.netscape.certsrv.base.PKIException;
+import com.netscape.cmsutil.crypto.CryptoUtil;
public class PKIConnection {
@@ -346,6 +347,9 @@ public class PKIConnection {
SSLSocket.setSSLVersionRangeDefault(
org.mozilla.jss.ssl.SSLSocket.SSLProtocolVariant.DATA_GRAM,
datagram_range);
+
+ CryptoUtil.setClientCiphers();
+
SSLSocket socket;
if (sock == null) {
socket = new SSLSocket(InetAddress.getByName(hostName),