IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Use PKCS#8 instead of traditional privkey format

Browse Source 
The modern PKCS#8 private key format supports better encryption standard
and is preferable over traditional, weak PKCS#1 key format.

Fixes: https://pagure.io/freeipa/issue/7943
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Oleg Kozlov <okozlov@redhat.com>
This commit is contained in:
Christian Heimes
2019-05-13 16:30:42 +02:00
parent 7b8a2af219
commit 2042b5a0d2
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
ipatests/pytest_ipa/integration/tasks.py
View File

@@ -1718,6 +1718,7 @@ def generate_ssh_keypair():
pem = key.private_bytes(
encoding=serialization.Encoding.PEM,
# paramiko does not support PKCS#8 format, yet.
format=serialization.PrivateFormat.TraditionalOpenSSL,
encryption_algorithm=serialization.NoEncryption()
)