Alexander Bokovoy 1311df2e0e Use OpenSSL provider with BIND for Fedora 42+ and RHEL10+ ...

OpenSSL Engine API is deprecated and ability to compile against it is
removed in RHEL10. OpenSSL provider API is the future.

Fedora 42+ also defaults to OpenSSL provider. With pkcs11-provider, the
same PKCS#11 modules can be loaded transparently like with OpenSSL
engines. Thus, we can update configuration to use the provider API.

While Fedora 41 also defaults to OpenSSL provider, we need BIND version
that supports using OpenSSL provider API. This backport was only done in
Fedora 42.

Fixes: https://pagure.io/freeipa/issue/9696

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>

2025-05-06 13:48:35 +02:00

..

__init__.py

Start to deprecate Python 2 and 3.5

2018-06-19 14:37:53 +02:00

constants.py

Use OpenSSL provider with BIND for Fedora 42+ and RHEL10+

2025-05-06 13:48:35 +02:00

paths.py

freeipa.spec: depend on bind-dnssec-utils

2021-11-25 16:49:00 +01:00

services.py

named: Make use of 'pkcs11' OpenSSL engine for BIND on Fedora31

2020-08-31 09:42:31 +03:00

tasks.py

Enable TLS 1.3 support on the server

2019-12-02 16:48:07 +01:00