From e62b40b9249d0f0b394275da35fa7c2ee99842b5 Mon Sep 17 00:00:00 2001 From: Christina Fu Date: Fri, 10 Jul 2015 11:41:22 -0700 Subject: Ticket 1459 Dogtag clients cannot connect when CS is configured with ECC clients are: cli, HttpClient, and java console --- base/java-tools/src/com/netscape/cmstools/HttpClient.java | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'base/java-tools') diff --git a/base/java-tools/src/com/netscape/cmstools/HttpClient.java b/base/java-tools/src/com/netscape/cmstools/HttpClient.java index f0603a4bd..432be9c15 100644 --- a/base/java-tools/src/com/netscape/cmstools/HttpClient.java +++ b/base/java-tools/src/com/netscape/cmstools/HttpClient.java @@ -40,6 +40,7 @@ import org.mozilla.jss.ssl.SSLHandshakeCompletedListener; import org.mozilla.jss.ssl.SSLSocket; import org.mozilla.jss.util.Password; +import com.netscape.cmsutil.crypto.CryptoUtil; import com.netscape.cmsutil.util.Utils; /** @@ -49,6 +50,7 @@ import com.netscape.cmsutil.util.Utils; */ public class HttpClient { public static final String PR_INTERNAL_TOKEN_NAME = "internal"; + private String _host = null; private int _port = 0; private boolean _secure = false; @@ -144,6 +146,9 @@ public class HttpClient { SSLSocket.setSSLVersionRangeDefault( org.mozilla.jss.ssl.SSLSocket.SSLProtocolVariant.DATA_GRAM, datagram_range); + + CryptoUtil.setClientCiphers(); + sslSocket = new SSLSocket(_host, _port); // setSSLVersionRange needs to be exposed in jss // sslSocket.setSSLVersionRange(org.mozilla.jss.ssl.SSLSocket.SSLVersionRange.tls1_0, org.mozilla.jss.ssl.SSLSocket.SSLVersionRange.tls1_2); -- cgit