Fraser Tweedale 8fbcc33534 NSSWrappedCertDB: accept optional symmetric algorithm ... Add support for Custodia ca_wrapped clients to specify the desired symmetric encryption algorithm for exporting the wrapped signing key (this mechanism is used for LWCA key replication). If not specified, we must assume that the client has an older Dogtag version that can only import keys wrapped with DES-EDE3-CBC encryption. The selected algorithm gets passed to the 'nsswrappedcert' handler, which in turn passes it to the 'pki ca-authority-key-export' command (which is part of Dogtag). Client-side changes will occur in a subsequent commit. Part of: https://pagure.io/freeipa/issue/8020 Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>		2019-09-25 12:42:06 +10:00
..
__init__.py	Move Custodia secrets handler to scripts	2019-04-26 12:09:22 +02:00
common.py	Move Custodia secrets handler to scripts	2019-04-26 12:09:22 +02:00
dmldap.py	Don't create log files from help scripts	2019-09-24 15:23:30 +02:00
nsscert.py	Move Custodia secrets handler to scripts	2019-04-26 12:09:22 +02:00
nsswrappedcert.py	NSSWrappedCertDB: accept optional symmetric algorithm	2019-09-25 12:42:06 +10:00
pemfile.py	Move Custodia secrets handler to scripts	2019-04-26 12:09:22 +02:00