mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-10-26 07:00:07 -05:00
FIPS setup: fix typo filtering camellia encryption
The config file /var/kerberos/krb5kdc/kdc.conf is customized during IPA server installation with a list of supported encryption types. In FIPS mode, camellia encryption is not supported and should be filtered out. Because of a typo in the filtering method, the camellia encryptions are appended while they should not. Fix the typo (camelia vs camellia) in order to filter properly. Signed-off-by: Florence Blanc-Renaud <flo@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
This commit is contained in:
1 parent
c853cfde56
commit
dfba6ebf9a
1 file changed
+1
-1
@@ -282,7 +282,7 @@ class KrbInstance(service.Service):
|
||||
|
||||
if fips_enabled:
|
||||
supported_enctypes = list(
|
||||
filter(lambda e: not e.startswith('camelia'),
|
||||
filter(lambda e: not e.startswith('camellia'),
|
||||
SUPPORTED_ENCTYPES))
|
||||
else:
|
||||
supported_enctypes = SUPPORTED_ENCTYPES
|
||||
|
||||
Reference in new issue
Block a user