Bugzilla BZ# 683581: CA configuration with ECC(Default EC curve-nistp521) CA fails with 'signing operation failed'

git-svn-id: svn+ssh://svn.fedorahosted.org/svn/pki/trunk@1912 c9f7a03b-bd48-0410-a16d-cbbf54688b0b

1 files changed, 6 insertions, 2 deletions

diff --git a/pki/base/common/src/com/netscape/cms/servlet/csadmin/SizePanel.java b/pki/base/common/src/com/netscape/cms/servlet/csadmin/SizePanel.java
index 3a3f1b927..4384936c0 100644
--- a/pki/base/common/src/com/netscape/cms/servlet/csadmin/SizePanel.java
+++ b/pki/base/common/src/com/netscape/cms/servlet/csadmin/SizePanel.java
@@ -130,7 +130,7 @@ public class SizePanel extends WizardPanelBase {
         }
 
         try {
-            default_ecc_curve_name = config.getString("keys.ecc.curve.default", "nistp521"); 
+            default_ecc_curve_name = config.getString("keys.ecc.curve.default", "nistp256"); 
         } catch (Exception e) {
         }
 
@@ -305,6 +305,7 @@ public class SizePanel extends WizardPanelBase {
                     config.putString(PCERT_PREFIX + ct + ".signingalgorithm", signingalgorithm);
                     config.putString(PCERT_PREFIX + ct + ".keysize.select",
                             "default");
+
                     if (keytype != null && keytype.equals("ecc")) {
                       config.putString(PCERT_PREFIX + ct + 
                             ".curvename.custom_name",
@@ -615,9 +616,12 @@ public class SizePanel extends WizardPanelBase {
             s = config.getString("preop.rsa.algorithm.list", "SHA256withRSA,SHA1withRSA,SHA512withRSA,MD5withRSA,MD2withRSA");
             context.put("rsalist", s);
 
-            s = config.getString("keys.ecc.curve.list", "nistp521");
+            s = config.getString("keys.ecc.curve.list", "nistp256");
             context.put("curvelist", s);
 
+            s = config.getString("keys.ecc.curve.display.list", "nistp256");
+            context.put("displaycurvelist", s);
+
             s = config.getString("pkicreate.subsystem_type");
             context.put("subsystemtype", s);