Rob Crittenden 6b6c1879c5 Call hsm_validator on KRA installs and validate the HSM password ...

hsm_validator was validating that the token was available but
not that the provided password worked. Add that capability.

Also call it early in the CA and KRA installation cycle so that
it errors out early. This is particularly important for the KRA
because there is no uninstaller.

Bump the minimum PKI release to 11.5.0 as that contains important
fixes for the HSM.

Remove an unused arguments to hsm_version and hsm_validator.

Related: https://pagure.io/freeipa/issue/9273

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>

2024-05-16 08:46:32 -04:00

..

advise

pylint: Skip raising-bad-type

2022-03-11 13:37:08 -05:00

custodia

Remove ipaserver.custodia.__init__.py

2023-11-27 18:15:44 +01:00

dnssec

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

install

Call hsm_validator on KRA installs and validate the HSM password

2024-05-16 08:46:32 -04:00

plugins

If HSM is configured add the token name to config-show output

2024-05-16 08:46:32 -04:00

secrets

pylint: disable missing-timeout message

2023-01-10 08:30:58 +01:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc_common.py

Py3: Replace six.text_type with str

2018-09-27 16:11:18 +02:00

dcerpc.py

ipaserver: fix incorrect double negative in exception message

2024-05-06 17:10:18 -04:00

dns_data_management.py

Wipe the ipa-ca DNS record when updating system records

2023-02-09 14:24:14 -05:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

masters.py

Configure affinity during server installation

2023-09-01 13:13:02 -04:00

p11helper.py

Grammar: whitespace is a word

2020-06-23 10:16:29 +02:00

rpcserver.py

rpcserver: validate Kerberos principal name before running kinit

2024-02-21 17:07:33 -05:00

servroles.py

Use api.env.container_sysaccounts

2020-04-28 11:28:29 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Also drop Custodia client and forwarder

2021-06-16 10:28:17 -04:00

topology.py

pylint: Fix consider-using-dict-items

2022-03-11 13:37:08 -05:00

wsgi.py

Improve wsgi app loading

2021-04-07 11:43:23 +03:00