freeipa

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00

Files

Christian Heimes 1d80048e05 Use PyCA crypto provider for KRAClient

The Dogtag KRA backend now uses CryptographyCryptoProvider instead of
NSSCryptoProvider for KRAClient connections. The
CryptographyCryptoProvider uses PyCA cryptography to provide wrapping
and unwrapping. The change will allow Dogtag to remove the
NSSCryptoProvider and drop python-nss as a dependency.

The code in ipaserver.plugins.dogtag creates a Certificate object to
work around a bug in Dogtag. Dogtag supports paths but passes the wrong
type to PyCA cryptography.

Fixes: https://pagure.io/freeipa/issue/8814
See: https://github.com/dogtagpki/pki/issues/3499
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2021-04-23 17:57:50 +02:00

advise

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

dnssec

OpenDNSSEC: fix timezone in key creation date

2021-02-04 14:20:59 +01:00

install

Allow overriding is_newer_tomcat_version()

2021-03-25 15:43:22 +01:00

plugins

Use PyCA crypto provider for KRAClient