mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-10-25 14:40:16 -05:00
Alexander Bokovoy
1311df2e0e
OpenSSL Engine API is deprecated and ability to compile against it is removed in RHEL10. OpenSSL provider API is the future. Fedora 42+ also defaults to OpenSSL provider. With pkcs11-provider, the same PKCS#11 modules can be loaded transparently like with OpenSSL engines. Thus, we can update configuration to use the provider API. While Fedora 41 also defaults to OpenSSL provider, we need BIND version that supports using OpenSSL provider API. This backport was only done in Fedora 42. Fixes: https://pagure.io/freeipa/issue/9696 Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>
45 lines
1.2 KiB
Python
45 lines
1.2 KiB
Python
#
|
|
# Copyright (C) 2015 FreeIPA Contributors see COPYING for license
|
|
#
|
|
|
|
'''
|
|
This Fedora base platform module exports platform related constants.
|
|
'''
|
|
|
|
# Fallback to default constant definitions
|
|
from __future__ import absolute_import
|
|
|
|
from ipaplatform.redhat.constants import (
|
|
RedHatConstantsNamespace, User, Group
|
|
)
|
|
from ipaplatform.osinfo import osinfo
|
|
|
|
# Fedora 28 and earlier use /etc/sysconfig/nfs
|
|
# Fedora 30 and later use /etc/nfs.conf
|
|
# Fedora 29 has both
|
|
HAS_NFS_CONF = osinfo.version_number >= (30,)
|
|
|
|
# Fedora 40 and later deprecated OpenSSL engine and recommend using OpenSSL
|
|
# provider API. However, only bind 9.18 in F42+ was built with OpenSSL provider.
|
|
HAS_OPENSSL_PROVIDER = osinfo.version_number >= (42,)
|
|
|
|
|
|
__all__ = ("constants", "User", "Group")
|
|
|
|
|
|
class FedoraConstantsNamespace(RedHatConstantsNamespace):
|
|
# Fedora allows installation of Python 2 and 3 mod_wsgi, but the modules
|
|
# can't coexist. For Apache to load correct module.
|
|
MOD_WSGI_PYTHON2 = "modules/mod_wsgi.so"
|
|
MOD_WSGI_PYTHON3 = "modules/mod_wsgi_python3.so"
|
|
|
|
if HAS_NFS_CONF:
|
|
SECURE_NFS_VAR = None
|
|
|
|
if HAS_OPENSSL_PROVIDER:
|
|
NAMED_OPENSSL_PROVIDER = True
|
|
else:
|
|
NAMED_OPENSSL_ENGINE = "pkcs11"
|
|
|
|
constants = FedoraConstantsNamespace()
|