mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-10-25 14:40:16 -05:00
Julien Rische
fb36633e69
Since commit 4ed7da378940198cf4415f86d4eb013de6ac6455 in MIT krb5, kdb5_util sets the required bits on the modification mask of updated principal entries to enable ipa-kdb to switch the active master key. This commit creates a "test_fedora_legacy" ipaplatform where the AES HMAC-SHA2 encryption types are not enabled. "test_mkey_upgrade" uses this platform to initialize a domain with an aes256-cts-hmac-sha1-96 master key, and test its upgrade to aes256-cts-hmac-sha384-192. Some parts of the test infrastructure had to be made aware of this new platform (e.g. firewall integration). Reviewed-By: Rob Crittenden <rcritten@redhat.com>