summaryrefslogtreecommitdiffstats
path: root/freeipa.spec.in
diff options
context:
space:
mode:
authorChristian Heimes <cheimes@redhat.com>2015-07-07 15:10:28 +0200
committerMartin Basti <mbasti@redhat.com>2015-07-27 17:25:57 +0200
commit3c974c157f332bd8f4db48eba52d2b760c0c1e77 (patch)
treea637040d5d73104c5161a2489ecfd8e204dbffbc /freeipa.spec.in
parent2596adb312700a6133a4405851af9aec62941cd9 (diff)
downloadfreeipa-3c974c157f332bd8f4db48eba52d2b760c0c1e77.tar.gz
freeipa-3c974c157f332bd8f4db48eba52d2b760c0c1e77.tar.xz
freeipa-3c974c157f332bd8f4db48eba52d2b760c0c1e77.zip
otptoken: use ipapython.nsslib instead of Python's ssl module
The otptoken plugin is the only module in FreeIPA that uses Python's ssl module instead of NSS. The patch replaces ssl with NSSConnection. It uses the default NSS database to lookup trust anchors. NSSConnection uses NSS for hostname matching. The package python-backports-ssl_match_hostname is no longer required. https://fedorahosted.org/freeipa/ticket/5068 Reviewed-By: Martin Basti <mbasti@redhat.com>
Diffstat (limited to 'freeipa.spec.in')
-rw-r--r--freeipa.spec.in2
1 files changed, 0 insertions, 2 deletions
diff --git a/freeipa.spec.in b/freeipa.spec.in
index 928425fdc..649af3c2e 100644
--- a/freeipa.spec.in
+++ b/freeipa.spec.in
@@ -95,7 +95,6 @@ BuildRequires: systemd
BuildRequires: libunistring-devel
BuildRequires: python-lesscpy
BuildRequires: python-yubico >= 1.2.3
-BuildRequires: python-backports-ssl_match_hostname
BuildRequires: softhsm-devel >= 2.0.0rc1-1
BuildRequires: openssl-devel
BuildRequires: p11-kit-devel
@@ -272,7 +271,6 @@ Requires: libsss_autofs
Requires: autofs
Requires: libnfsidmap
Requires: nfs-utils
-Requires: python-backports-ssl_match_hostname
Requires(post): policycoreutils
Conflicts: %{alt_name}-client