Fix RSA key pairs generation in FIPS environment

When FIPS is enabled and kay are not temporary then the sensitive flag has to be true. Flags are assigned only if not `NULL` so to enable the default values they generator is invoked with `NULL` value instead of `false` value which was assigned.
dogtagpki · Nov 9, 2023 · cc3987c · cc3987c
1 parent 8e01622
commit cc3987c
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 9 deletions.
diff --git a/base/common/src/main/java/com/netscape/cmsutil/crypto/CryptoUtil.java b/base/common/src/main/java/com/netscape/cmsutil/crypto/CryptoUtil.java
@@ -423,9 +423,9 @@ public static KeyPair generateRSAKeyPair(
         return generateRSAKeyPair(
                 token,
                 keySize,
-                false,
-                false,
-                false,
+                null,
+                null,
+                null,
                 usages,
                 usagesMask);
     }

diff --git a/base/common/src/main/java/org/dogtagpki/nss/NSSDatabase.java b/base/common/src/main/java/org/dogtagpki/nss/NSSDatabase.java
@@ -972,9 +972,9 @@ public KeyPair createRSAKeyPair(
         return CryptoUtil.generateRSAKeyPair(
                 token,
                 keySize,
-                false,
-                false,
-                false,
+                null,
+                null,
+                null,
                 usages,
                 usagesMask);
     }
@@ -989,9 +989,9 @@ public KeyPair createRSAKeyPair(
         return CryptoUtil.generateRSAKeyPair(
                 token,
                 keySize,
-                false,
-                false,
-                false,
+                null,
+                null,
+                null,
                 null,
                 null);
     }
-Original file line number
+Diff line change
@@ Expand Up / @@ -423,9 +423,9 @@ public static KeyPair generateRSAKeyPair( @@
             return generateRSAKeyPair(
                     token,
                     keySize,
-                    false,
-                    false,
-                    false,
+                    null,
+                    null,
+                    null,
                     usages,
                     usagesMask);
         }
@@ Expand Down @@