Florence Blanc-Renaud 3b007b7bba Always define the path DNSSEC_OPENSSL_CONF ... The variable was None by default and set to /etc/ipa/dnssec/openssl.cnf for fedora only because the code is specific to the support of pkcs11 engine for bind. As a consequence ipa-backup had a "None" value in the list of files to backup and failed on Exception. ipa-backup code is able to handle missing files, and the code using the pkcs11 engine is called only when NAMED_OPENSSL_ENGINE is set (only in fedora so far). It is safe to always define a value for DNSSEC_OPENSSL_CONF even on os where it does not exist. The fix also improves the method used to verify that a path exists. Fixes: https://pagure.io/freeipa/issue/8597 Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>		2020-11-30 15:52:19 +01:00
..
__init__.py	Start to deprecate Python 2 and 3.5	2018-06-19 14:37:53 +02:00
constants.py	Add User and Group to all ipaplatform.constants	2020-09-22 09:23:18 -04:00
paths.py	Always define the path DNSSEC_OPENSSL_CONF	2020-11-30 15:52:19 +01:00
services.py	named: Make use of 'pkcs11' OpenSSL engine for BIND on Fedora31	2020-08-31 09:42:31 +03:00
tasks.py	Enable TLS 1.3 support on the server	2019-12-02 16:48:07 +01:00