freeipa/ipaserver/install/server
Rob Crittenden 7ab1bcb2d3 Re-organize HSM validation to be more consistent/less duplication
hsm_validator() was more or less bolted in place late in the
development cycle in in order to catch some of the more common
problems: bad token name, bad password, etc.

There was a fair bit of duplication and had the side-effect of not
reading in the token password from the --token-password-file option
in some cases.

This patch also re-adds a lost feature where an exception is raised if
both the --token-password and --token-password-file options are passed
in.

This also needs to be enforced on initial server, replica and when
called by ipa-kra-install. Given that each has a unique subject of
options some duplication remains.

Fixes: https://pagure.io/freeipa/issue/9603

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
2024-07-15 10:26:54 -04:00
..
__init__.py Add HSM configuration options to installer scripts 2024-05-16 08:46:32 -04:00
install.py Re-organize HSM validation to be more consistent/less duplication 2024-07-15 10:26:54 -04:00
replicainstall.py After an HSM replica install ensure all certs are visible 2024-05-16 08:46:32 -04:00
upgrade.py kra: set RSA-OAEP as default wrapping algo when FIPS is enabled 2024-01-30 10:18:02 -05:00