IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-11 00:31:56 -06:00
Code Issues Packages Projects Releases Wiki Activity

FIPS setup: fix typo filtering camellia encryption

Browse Source 
The config file /var/kerberos/krb5kdc/kdc.conf is customized
during IPA server installation with a list of supported
encryption types.
In FIPS mode, camellia encryption is not supported and should
be filtered out. Because of a typo in the filtering method,
the camellia encryptions are appended while they should not.

Fix the typo (camelia vs camellia) in order to filter properly.

Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
This commit is contained in:
Florence Blanc-Renaud 2022-12-09 10:45:56 +01:00
parent 6bd9d156e0
commit 17a5d5bff1
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ipaserver/install/krbinstance.py
View File

@ -282,7 +282,7 @@ class KrbInstance(service.Service):
if fips_enabled: if fips_enabled:
supported_enctypes = list( supported_enctypes = list(
filter(lambda e: not e.startswith('camelia'), filter(lambda e: not e.startswith('camellia'),
SUPPORTED_ENCTYPES)) SUPPORTED_ENCTYPES))
else: else:
supported_enctypes = SUPPORTED_ENCTYPES supported_enctypes = SUPPORTED_ENCTYPES