From e62b40b9249d0f0b394275da35fa7c2ee99842b5 Mon Sep 17 00:00:00 2001 From: Christina Fu Date: Fri, 10 Jul 2015 11:41:22 -0700 Subject: Ticket 1459 Dogtag clients cannot connect when CS is configured with ECC clients are: cli, HttpClient, and java console --- base/common/src/com/netscape/certsrv/client/PKIConnection.java | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'base/common') diff --git a/base/common/src/com/netscape/certsrv/client/PKIConnection.java b/base/common/src/com/netscape/certsrv/client/PKIConnection.java index 1f9b6dff1..85b6c2082 100644 --- a/base/common/src/com/netscape/certsrv/client/PKIConnection.java +++ b/base/common/src/com/netscape/certsrv/client/PKIConnection.java @@ -82,6 +82,7 @@ import org.mozilla.jss.ssl.SSLCertificateApprovalCallback; import org.mozilla.jss.ssl.SSLSocket; import com.netscape.certsrv.base.PKIException; +import com.netscape.cmsutil.crypto.CryptoUtil; public class PKIConnection { @@ -346,6 +347,9 @@ public class PKIConnection { SSLSocket.setSSLVersionRangeDefault( org.mozilla.jss.ssl.SSLSocket.SSLProtocolVariant.DATA_GRAM, datagram_range); + + CryptoUtil.setClientCiphers(); + SSLSocket socket; if (sock == null) { socket = new SSLSocket(InetAddress.getByName(hostName), -- cgit