freeipa/ipaserver
Christian Heimes 74e09087ed Globally disable softhsm2 in p11-kit-proxy
The p11-kit configuration injects p11-kit-proxy into all NSS databases.
Amongst other p11-kit loads SoftHSM2 PKCS#11 provider. This interferes
with 389-DS, certmonger, Dogtag and other services. For example certmonger
tries to open OpenDNSSEC's SoftHSM2 token, although it doesn't use it at
all. It also breaks Dogtag HSM support testing with SoftHSM2.

IPA server does neither need nor use SoftHSM2 proxied by p11-kit.

Related: https://pagure.io/freeipa/issue/7810
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2019-04-25 12:53:08 +02:00
..
advise Add install/remove package helpers to advise 2018-12-11 13:46:52 +01:00
dnssec Add ODS manager abstraction to ipaplatform 2019-04-24 14:08:20 +02:00
install Globally disable softhsm2 in p11-kit-proxy 2019-04-25 12:53:08 +02:00
plugins Adapt cert-find performance workaround for users 2019-04-09 09:13:27 +02:00
secrets Py3: Replace six.moves imports 2018-10-05 12:06:19 +02:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc_common.py Py3: Replace six.text_type with str 2018-09-27 16:11:18 +02:00
dcerpc.py Use new LDAPClient constructors 2019-02-05 08:39:13 -05:00
dns_data_management.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
masters.py Add hidden replica feature 2019-03-28 17:57:58 +01:00
p11helper.py pylint 2.2: Fix unnecessary pass statement 2018-11-26 16:54:43 +01:00
rpcserver.py Py3: Replace six.moves imports 2018-10-05 12:06:19 +02:00
servroles.py Improve config-show to show hidden servers 2019-03-28 17:57:58 +01:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Disable dependency on dogtag-pki PyPI package 2019-02-12 11:14:06 +01:00
topology.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00