freeipa/ipaplatform/debian
Christian Heimes 74e09087ed Globally disable softhsm2 in p11-kit-proxy
The p11-kit configuration injects p11-kit-proxy into all NSS databases.
Amongst other p11-kit loads SoftHSM2 PKCS#11 provider. This interferes
with 389-DS, certmonger, Dogtag and other services. For example certmonger
tries to open OpenDNSSEC's SoftHSM2 token, although it doesn't use it at
all. It also breaks Dogtag HSM support testing with SoftHSM2.

IPA server does neither need nor use SoftHSM2 proxied by p11-kit.

Related: https://pagure.io/freeipa/issue/7810
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2019-04-25 12:53:08 +02:00
..
__init__.py ipaplatform: Add Debian platform module. 2017-01-19 16:45:42 +01:00
constants.py named.conf: Disable duplicate zone on debian, and modify data dir 2018-05-29 17:03:56 +02:00
paths.py Debian: Fix replicatio of light weight sub CAs 2019-04-24 14:08:20 +02:00
services.py Debian: Use RedHatCAService for pki-tomcatd 2019-04-24 14:08:20 +02:00
tasks.py Globally disable softhsm2 in p11-kit-proxy 2019-04-25 12:53:08 +02:00