Florence Blanc-Renaud 3e6b5b954b FIPS mode: openssl pkcs12 command needs -nomacver option ...

In FIPS mode, ipa server installation fails in a call to
openssl pkcs12 command because the PKCS12 MAC requires PKCS12KDF
which is not an approved FIPS algo.
The fix consists in passing the additional option -nomacver

Fixes: https://pagure.io/freeipa/issue/9878
Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2025-11-20 15:40:37 -05:00

..

advise

The -d option of the ipa-advise command was able to used.

2024-07-10 11:39:31 -04:00

custodia

Stop using deprecated pkg_resources

2025-05-06 13:48:35 +02:00

dnssec

Use OpenSSL provider with BIND for Fedora 42+ and RHEL10+

2025-05-06 13:48:35 +02:00

install

FIPS mode: openssl pkcs12 command needs -nomacver option

2025-11-20 15:40:37 -05:00

plugins

Move some functions to installutils to be more independent

2025-11-19 16:50:37 -05:00

secrets

Custodia: in fips mode add -nomac or -nomacver to openssl pkcs12

2024-09-09 16:00:30 +02:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc_common.py

Py3: Replace six.text_type with str

2018-09-27 16:11:18 +02:00

dcerpc.py

dcerpc: Support Samba 4.23

2025-09-12 14:03:09 +02:00

dns_data_management.py

Wipe the ipa-ca DNS record when updating system records

2023-02-09 14:24:14 -05:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

masters.py

Configure affinity during server installation

2023-09-01 13:13:02 -04:00

p11helper.py

Grammar: whitespace is a word

2020-06-23 10:16:29 +02:00

rpcserver.py

Force a logout in KerberosSession if a login is needed

2024-08-05 09:34:17 +02:00

servroles.py

Use api.env.container_sysaccounts

2020-04-28 11:28:29 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Also drop Custodia client and forwarder

2021-06-16 10:28:17 -04:00

topology.py

pylint: Fix consider-using-dict-items

2022-03-11 13:37:08 -05:00

wsgi.py

Improve wsgi app loading

2021-04-07 11:43:23 +03:00