Bug 804250 - CMC code uses deprecated code for DSA and ECC key types . . .
Summary: CMC code uses deprecated code for DSA and ECC key types . . .
Keywords:
Status: CLOSED EOL
Alias: None
Product: Dogtag Certificate System
Classification: Retired
Component: ECC
Version: 10.0
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Christina Fu
QA Contact: Ben Levenson
URL:
Whiteboard:
Depends On:
Blocks: 530474
TreeView+ depends on / blocked
 
Reported: 2012-03-17 00:59 UTC by Matthew Harmsen
Modified: 2020-03-27 18:37 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-03-27 18:37:27 UTC


Attachments (Terms of Use)

Description Matthew Harmsen 2012-03-17 00:59:22 UTC
Description of problem:

While wading through methods that have been deprecated by JSS, the following method was discovered:

    ./jss-4.2.6/mozilla/security/jss/org/mozilla/jss/pkcs11/PK11PubKey.java

         @deprecated This method works for RSA keys but not DSA or EC keys.
                     Use fromSPKI() instead.
         public static PK11PubKey fromRaw(PrivateKey.Type type, byte[] rawKey)
         throws InvalidKeyFormatException

In performing a top-level search for "fromRaw()" in Dogtag 10 (located on the GIT "master"):

    # find . -exec grep fromRaw /dev/null {} \;
    ./pki/base/common/src/com/netscape/cms/authentication/CMCAuth.java:
    PK11PubKey pubK = PK11PubKey.fromRaw(keyType, ((X509Key) signKey).getKey());

    ./pki/base/common/src/com/netscape/cms/servlet/common/CMCOutputTemplate.java:
    PK11PubKey pubK = PK11PubKey.fromRaw(kType, ((X509Key) pbKey).getKey());

    ./pki/base/common/src/com/netscape/cms/servlet/processors/CMCProcessor.java:
    PK11PubKey.fromRaw(keyType,

    ./pki/base/common/src/com/netscape/cms/servlet/processors/CMCProcessor.java:
    PK11PubKey pubK = PK11PubKey.fromRaw(


Note You need to log in before you can comment on or make changes to this bug.