FIPS setup: fix typo filtering camellia encryption

The config file /var/kerberos/krb5kdc/kdc.conf is customized
during IPA server installation with a list of supported
encryption types.
In FIPS mode, camellia encryption is not supported and should
be filtered out. Because of a typo in the filtering method,
the camellia encryptions are appended while they should not.

Fix the typo (camelia vs camellia) in order to filter properly.

Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
This commit is contained in:
Florence Blanc-Renaud committed 2022-12-19 21:46:51 +01:00
1 parent c853cfde56
commit dfba6ebf9a
1 file changed
+1 -1
+1 -1
View File
@@ -282,7 +282,7 @@ class KrbInstance(service.Service):
if fips_enabled:
supported_enctypes = list(
filter(lambda e: not e.startswith('camelia'),
filter(lambda e: not e.startswith('camellia'),
SUPPORTED_ENCTYPES))
else:
supported_enctypes = SUPPORTED_ENCTYPES