diff options
| author | Jack Magne <jmagne@dhcp-16-206.sjc.redhat.com> | 2017-06-02 15:40:52 -0700 |
|---|---|---|
| committer | Jack Magne <jmagne@dhcp-16-206.sjc.redhat.com> | 2017-06-02 16:34:56 -0700 |
| commit | a614eb15476adb00df571d3ea05fdd8ea282141d (patch) | |
| tree | d76d963d47b473ca75deaa2c5ecff830bbe1fedd /base/tps/src/org/dogtagpki/server/tps/processor/TPSProcessor.java | |
| parent | 29dbed75f1c214a065cd3bcc438d0584fd980d4f (diff) | |
| download | pki-a614eb15476adb00df571d3ea05fdd8ea282141d.tar.gz pki-a614eb15476adb00df571d3ea05fdd8ea282141d.tar.xz pki-a614eb15476adb00df571d3ea05fdd8ea282141d.zip | |
Resolve #1663 Add SCP03 support .
This particular fix resolves a simple issue when formatting a token in FIPS mode for SCP03.
Diffstat (limited to 'base/tps/src/org/dogtagpki/server/tps/processor/TPSProcessor.java')
| -rw-r--r-- | base/tps/src/org/dogtagpki/server/tps/processor/TPSProcessor.java | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/base/tps/src/org/dogtagpki/server/tps/processor/TPSProcessor.java b/base/tps/src/org/dogtagpki/server/tps/processor/TPSProcessor.java index 0f9691556..e1a574878 100644 --- a/base/tps/src/org/dogtagpki/server/tps/processor/TPSProcessor.java +++ b/base/tps/src/org/dogtagpki/server/tps/processor/TPSProcessor.java @@ -957,6 +957,10 @@ public class TPSProcessor { kekSessionKeySCP03 = (PK11SymKey) protocol.unwrapWrappedSymKeyOnToken(token, sharedSecret, kekSessionKeyBuff.toBytesArray(), false, SymmetricKey.AES); + CMS.debug(" encSessionKeySCP03 " + encSessionKeySCP03); + CMS.debug(" macSessionKeySCP03 " + macSessionKeySCP03); + CMS.debug(" kekSessionKeySCP03 " + kekSessionKeySCP03); + channel = new SecureChannel(this, encSessionKeySCP03, macSessionKeySCP03, kekSessionKeySCP03, drmDesKeyBuff, kekDesKeyBuff, keyCheckBuff, keyDiversificationData, cardChallenge, |