freeipa/ipalib
Christian Heimes 90a75f0d43 Use system-wide crypto-policies on Fedora
HTTPS connections from IPA framework and bind named instance now use
system-wide crypto-policies on Fedora.

For HTTPS the 'DEFAULT' crypto policy also includes unnecessary ciphers
for PSK, SRP, aDSS and 3DES. Since these ciphers are not used by freeIPA,
they are explicitly excluded.

See: https://bugzilla.redhat.com/show_bug.cgi?id=1179925
See: https://bugzilla.redhat.com/show_bug.cgi?id=1179220
Fixes: https://pagure.io/freeipa/issue/4853
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
2018-02-20 17:01:52 +01:00
..
install Fix FileStore.backup_file() not to backup same file 2018-02-19 14:16:51 +01:00
__init__.py logging: remove object-specific loggers 2017-07-14 15:55:59 +02:00
aci.py pylint: disable __hash__ for some classes 2017-09-08 15:42:07 +02:00
backend.py Fix pylint warnings inconsistent-return-statements 2017-12-18 11:51:14 +01:00
base.py Modernize use of range() 2015-09-01 11:42:01 +02:00
capabilities.py Replace LooseVersion 2016-11-24 15:46:40 +01:00
cli.py LGTM: Use of exit() or quit() 2018-01-09 07:53:28 +01:00
config.py Fix multiple uninstallation of server 2018-02-15 14:02:03 +01:00
constants.py Use system-wide crypto-policies on Fedora 2018-02-20 17:01:52 +01:00
crud.py ipalib, ipaserver: fix incorrect API.register calls in docstrings 2016-05-25 16:06:26 +02:00
dns.py dns: do not rely on custom param fields in record attributes 2016-06-20 16:39:12 +02:00
errors.py Require UTF-8 fs encoding 2017-11-21 16:13:28 +01:00
frontend.py Fix pylint warnings inconsistent-return-statements 2017-12-18 11:51:14 +01:00
krb_utils.py Allow login to WebUI using Kerberos aliases/enterprise principals 2017-03-08 15:56:11 +01:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
messages.py Improve warning message for malformed certificates 2018-02-06 11:42:34 +01:00
misc.py Add fix for ipa plugins command 2017-02-17 10:22:07 +01:00
output.py Generate same API.txt under Python 2 and 3 2018-02-15 09:41:30 +01:00
parameters.py Generate same API.txt under Python 2 and 3 2018-02-15 09:41:30 +01:00
pkcs10.py Remove pkcs10 module contents 2017-10-25 09:46:41 +02:00
plugable.py LGTM: Use explicit string concatenation 2018-01-09 07:53:28 +01:00
request.py remove trailing newlines form python modules 2016-10-12 10:38:52 +02:00
rpc.py Fixing translation problems 2018-01-31 16:03:19 +01:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Have all the scripts run in python 3 by default 2018-02-15 18:43:12 +01:00
text.py pylint: disable __hash__ for some classes 2017-09-08 15:42:07 +02:00
util.py Use system-wide crypto-policies on Fedora 2018-02-20 17:01:52 +01:00
x509.py Fix pylint warnings inconsistent-return-statements 2017-12-18 11:51:14 +01:00