Bug 634663 - CA CMC response default hard-coded to SHA1

git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1310 c9f7a03b-bd48-0410-a16d-cbbf54688b0b

2 files changed, 15 insertions, 0 deletions

diff --git a/pki/base/common/src/com/netscape/certsrv/ca/ICertificateAuthority.java b/pki/base/common/src/com/netscape/certsrv/ca/ICertificateAuthority.java
index 40a762ab5..bc545a9ba 100644
--- a/pki/base/common/src/com/netscape/certsrv/ca/ICertificateAuthority.java
+++ b/pki/base/common/src/com/netscape/certsrv/ca/ICertificateAuthority.java
@@ -26,6 +26,7 @@ import java.security.*;
 import java.security.cert.*;
 import netscape.security.x509.*;
 import netscape.security.util.*;
+import org.mozilla.jss.crypto.*;
 
 import com.netscape.certsrv.base.*;
 import com.netscape.certsrv.request.*;
@@ -167,6 +168,13 @@ public interface ICertificateAuthority extends ISubsystem {
     public void setMaxSerial(String serial) throws EBaseException;
 
     /**
+     * Retrieves the default signature algorithm of this certificate authority.
+     *
+     * @return the default signature algorithm of this CA
+     */
+    public SignatureAlgorithm getDefaultSignatureAlgorithm();
+
+    /**
      * Retrieves the default signing algorithm of this certificate authority.
      *
      * @return the default signing algorithm of this CA
diff --git a/pki/base/common/src/com/netscape/certsrv/security/ISigningUnit.java b/pki/base/common/src/com/netscape/certsrv/security/ISigningUnit.java
index 4996cb866..ac46a271d 100644
--- a/pki/base/common/src/com/netscape/certsrv/security/ISigningUnit.java
+++ b/pki/base/common/src/com/netscape/certsrv/security/ISigningUnit.java
@@ -104,6 +104,13 @@ public interface ISigningUnit {
      *
      * @return default signing algorithm
      */
+    public SignatureAlgorithm getDefaultSignatureAlgorithm();
+
+    /**
+     * Retrieves the default algorithm name.
+     *
+     * @return default signing algorithm name
+     */
     public String getDefaultAlgorithm();
 
     /**