diff options
| author | Christina Fu <cfu@redhat.com> | 2015-07-10 11:41:22 -0700 |
|---|---|---|
| committer | Christina Fu <cfu@redhat.com> | 2015-07-13 18:21:22 -0700 |
| commit | e62b40b9249d0f0b394275da35fa7c2ee99842b5 (patch) | |
| tree | 51267f762c56cb74c603c6ddc682982f18d82a13 /base/java-tools/src/com/netscape | |
| parent | 8c9e59cfaff9ecda1483c07238ad0b58ea4f5f73 (diff) | |
| download | pki-e62b40b9249d0f0b394275da35fa7c2ee99842b5.tar.gz pki-e62b40b9249d0f0b394275da35fa7c2ee99842b5.tar.xz pki-e62b40b9249d0f0b394275da35fa7c2ee99842b5.zip | |
Ticket 1459 Dogtag clients cannot connect when CS is configured with ECC
clients are: cli, HttpClient, and java console
Diffstat (limited to 'base/java-tools/src/com/netscape')
| -rw-r--r-- | base/java-tools/src/com/netscape/cmstools/HttpClient.java | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/base/java-tools/src/com/netscape/cmstools/HttpClient.java b/base/java-tools/src/com/netscape/cmstools/HttpClient.java index f0603a4bd..432be9c15 100644 --- a/base/java-tools/src/com/netscape/cmstools/HttpClient.java +++ b/base/java-tools/src/com/netscape/cmstools/HttpClient.java @@ -40,6 +40,7 @@ import org.mozilla.jss.ssl.SSLHandshakeCompletedListener; import org.mozilla.jss.ssl.SSLSocket; import org.mozilla.jss.util.Password; +import com.netscape.cmsutil.crypto.CryptoUtil; import com.netscape.cmsutil.util.Utils; /** @@ -49,6 +50,7 @@ import com.netscape.cmsutil.util.Utils; */ public class HttpClient { public static final String PR_INTERNAL_TOKEN_NAME = "internal"; + private String _host = null; private int _port = 0; private boolean _secure = false; @@ -144,6 +146,9 @@ public class HttpClient { SSLSocket.setSSLVersionRangeDefault( org.mozilla.jss.ssl.SSLSocket.SSLProtocolVariant.DATA_GRAM, datagram_range); + + CryptoUtil.setClientCiphers(); + sslSocket = new SSLSocket(_host, _port); // setSSLVersionRange needs to be exposed in jss // sslSocket.setSSLVersionRange(org.mozilla.jss.ssl.SSLSocket.SSLVersionRange.tls1_0, org.mozilla.jss.ssl.SSLSocket.SSLVersionRange.tls1_2); |