From: Greg Hudson <ghudson@mit.edu>
Date: Fri, 11 Mar 2011 04:17:42 +0000 (+0000)
Subject: Fix a couple of key import modes in the NSS module, although they don't
X-Git-Tag: krb5-1.10-alpha1~538
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=01f37143f5623686b07b2ffa80e1564eb52f9ccc;p=krb5.git

Fix a couple of key import modes in the NSS module, although they don't
seem to matter a lot.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24698 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/lib/crypto/nss/enc_provider/camellia.c b/src/lib/crypto/nss/enc_provider/camellia.c
index 820071add..3461bfea7 100644
--- a/src/lib/crypto/nss/enc_provider/camellia.c
+++ b/src/lib/crypto/nss/enc_provider/camellia.c
@@ -71,7 +71,7 @@ krb5int_camellia_cbc_mac(krb5_key key, const krb5_crypto_iov *data,
 {
     krb5_error_code ret;
 
-    ret = k5_nss_gen_import(key, CKM_CAMELLIA_CBC, CKA_DECRYPT);
+    ret = k5_nss_gen_import(key, CKM_CAMELLIA_CBC, CKA_ENCRYPT);
     if (ret != 0)
         return ret;
     return k5_nss_gen_cbcmac_iov(key, CKM_CAMELLIA_CBC, ivec, data, num_data,
diff --git a/src/lib/crypto/nss/enc_provider/des3.c b/src/lib/crypto/nss/enc_provider/des3.c
index 5030dde2e..b57294580 100644
--- a/src/lib/crypto/nss/enc_provider/des3.c
+++ b/src/lib/crypto/nss/enc_provider/des3.c
@@ -55,7 +55,7 @@ k5_des3_decrypt_iov(krb5_key key, const krb5_data *ivec,
 {
    krb5_error_code ret;
 
-   ret = k5_nss_gen_import(key, CKM_DES3_CBC, CKA_ENCRYPT);
+   ret = k5_nss_gen_import(key, CKM_DES3_CBC, CKA_DECRYPT);
    if (ret != 0)
        return ret;
    return k5_nss_gen_block_iov(key, CKM_DES3_CBC, CKA_DECRYPT,