Florence Blanc-Renaud 6ddd9d978a Upgrade: use openssl_engine on rhel9 ...

The upgrade on RHEL9 needs to update /etc/sysconfig/ipa-dnskeysyncd
with DNSSEC_TOKENS_DIR and DNSSEC_SOFTHSM_PIN because those
environment variables are used by the systemd unit for ipa-dnskeysyncd.

Currently the upgrade skips this step because of a wrong comparison when
defining the constants:
HAS_PKCS11_OPENSSL_ENGINE = osinfo.version_number == (9,)

The above evaluates to false because osinfo.version_number is a tuple with
(9, minor_version).
Replace the comparison with osinfo.version_number[0] == 9 to make
sure that the upgrade code is properly called on RHEL 9.x

Fixes: https://pagure.io/freeipa/issue/9913
Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2026-01-07 15:20:29 +01:00

..

__init__.py

Build: replace ipaplatform magic with symlinks generated by configure

2016-10-24 13:30:12 +02:00

constants.py

Upgrade: use openssl_engine on rhel9

2026-01-07 15:20:29 +01:00

paths.py

rhel platform: add a named crypto-policy support

2021-07-16 15:38:53 +02:00

services.py

Adapt redhat ipaplatform to RHEL9/ELN

2021-03-29 10:03:21 +03:00

tasks.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00