summaryrefslogtreecommitdiffstats
path: root/base/kra
diff options
context:
space:
mode:
authorAde Lee <alee@redhat.com>2017-05-25 16:31:45 -0400
committerAde Lee <alee@redhat.com>2017-05-26 00:00:07 -0400
commit5438e24e022c4c169ff9b5c6325e5ec0023d4caa (patch)
tree1f38b1336540bc49460e72ff6739eac7e4efebc6 /base/kra
parent64233b8f26a3f87786fa0e0d641a5a02116ebece (diff)
downloadpki-5438e24e022c4c169ff9b5c6325e5ec0023d4caa.tar.gz
pki-5438e24e022c4c169ff9b5c6325e5ec0023d4caa.tar.xz
pki-5438e24e022c4c169ff9b5c6325e5ec0023d4caa.zip
Set encryption flag for generated keys
The key record for keys generated in the keygen servlets was not updated to reflect whether or not the server was set up to do encryption/key wrapping. This patch corrects this oversight. Bugzilla BZ# 1455617 Change-Id: I31daece8b93a0ad58cb595e6a23fe8705f338024
Diffstat (limited to 'base/kra')
-rw-r--r--base/kra/src/com/netscape/kra/AsymKeyGenService.java2
-rw-r--r--base/kra/src/com/netscape/kra/NetkeyKeygenService.java2
-rw-r--r--base/kra/src/com/netscape/kra/SymKeyGenService.java2
3 files changed, 3 insertions, 3 deletions
diff --git a/base/kra/src/com/netscape/kra/AsymKeyGenService.java b/base/kra/src/com/netscape/kra/AsymKeyGenService.java
index ea1d0ccdd..1e38b4828 100644
--- a/base/kra/src/com/netscape/kra/AsymKeyGenService.java
+++ b/base/kra/src/com/netscape/kra/AsymKeyGenService.java
@@ -197,7 +197,7 @@ public class AsymKeyGenService implements IService {
}
try {
- record.setWrappingParams(params, false);
+ record.setWrappingParams(params, allowEncDecrypt_archival);
} catch (Exception e) {
auditAsymKeyGenRequestProcessed(auditSubjectID, ILogger.FAILURE, request.getRequestId(),
clientKeyId, null, "Failed to store wrapping params");
diff --git a/base/kra/src/com/netscape/kra/NetkeyKeygenService.java b/base/kra/src/com/netscape/kra/NetkeyKeygenService.java
index 8383e895e..96d7aae43 100644
--- a/base/kra/src/com/netscape/kra/NetkeyKeygenService.java
+++ b/base/kra/src/com/netscape/kra/NetkeyKeygenService.java
@@ -477,7 +477,7 @@ public class NetkeyKeygenService implements IService {
return false;
}
- rec.setWrappingParams(params, false);
+ rec.setWrappingParams(params, allowEncDecrypt_archival);
CMS.debug("NetkeyKeygenService: before addKeyRecord");
rec.set(KeyRecord.ATTR_ID, serialNo);
diff --git a/base/kra/src/com/netscape/kra/SymKeyGenService.java b/base/kra/src/com/netscape/kra/SymKeyGenService.java
index a4613c285..578b1ffeb 100644
--- a/base/kra/src/com/netscape/kra/SymKeyGenService.java
+++ b/base/kra/src/com/netscape/kra/SymKeyGenService.java
@@ -221,7 +221,7 @@ public class SymKeyGenService implements IService {
}
try {
- rec.setWrappingParams(params, false);
+ rec.setWrappingParams(params, allowEncDecrypt_archival);
} catch (Exception e) {
mKRA.log(ILogger.LL_FAILURE,
"Failed to store wrapping parameters: " + e);