diff options
| author | Jan Cholasta <jcholast@redhat.com> | 2014-11-25 08:12:53 +0000 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2014-11-25 12:44:13 +0100 |
| commit | bef1d18878118aea379659bb10d78c1e955b0b63 (patch) | |
| tree | ccd5fb9c0cc2c5e5217ab444fede42a0e5e10b0a /install/tools | |
| parent | ed3dddab870563b398400b05af3d945e8fc2ec9d (diff) | |
| download | freeipa-bef1d18878118aea379659bb10d78c1e955b0b63.tar.gz freeipa-bef1d18878118aea379659bb10d78c1e955b0b63.tar.xz freeipa-bef1d18878118aea379659bb10d78c1e955b0b63.zip | |
Add TLS 1.2 to the protocol list in mod_nss config
https://fedorahosted.org/freeipa/ticket/4653
Reviewed-By: Martin Kosek <mkosek@redhat.com>
Diffstat (limited to 'install/tools')
| -rw-r--r-- | install/tools/ipa-upgradeconfig | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/install/tools/ipa-upgradeconfig b/install/tools/ipa-upgradeconfig index 0047a7bf8..967b1f527 100644 --- a/install/tools/ipa-upgradeconfig +++ b/install/tools/ipa-upgradeconfig @@ -1227,6 +1227,18 @@ def fix_trust_flags(): sysupgrade.set_upgrade_state('http', 'fix_trust_flags', True) +def update_mod_nss_protocol(http): + root_logger.info('[Updating mod_nss protocol versions]') + + if sysupgrade.get_upgrade_state('nss.conf', 'protocol_updated_tls12'): + root_logger.info("Protocol versions already updated") + return + + http.set_mod_nss_protocol() + + sysupgrade.set_upgrade_state('nss.conf', 'protocol_updated_tls12', True) + + def main(): """ Get some basics about the system. If getting those basics fail then @@ -1328,6 +1340,7 @@ def main(): http.change_mod_nss_port_from_http() http.stop() + update_mod_nss_protocol(http) fix_trust_flags() http.start() |