use NSS for SSL operations

1 files changed, 0 insertions, 24 deletions

diff --git a/ipaserver/install/cainstance.py b/ipaserver/install/cainstance.py
index 90028b41d..035d6315f 100644
--- a/ipaserver/install/cainstance.py
+++ b/ipaserver/install/cainstance.py
@@ -125,30 +125,6 @@ def import_pkcs12(input_file, input_passwd, cert_database,
                  "-k", cert_passwd,
                  "-w", input_passwd])
 
-def client_auth_data_callback(ca_names, chosen_nickname, password, certdb):
-    cert = None
-    if chosen_nickname:
-        try:
-            cert = nss.find_cert_from_nickname(chosen_nickname, password)
-            priv_key = nss.find_key_by_any_cert(cert, password)
-            return cert, priv_key
-        except NSPRError, e:
-            logging.debug("client auth callback failed %s" % str(e))
-            return False
-    else:
-        nicknames = nss.get_cert_nicknames(certdb, nss.SEC_CERT_NICKNAMES_USER)
-        for nickname in nicknames:
-            try:
-                cert = nss.find_cert_from_nickname(nickname, password)
-                if cert.check_valid_times():
-                    if cert.has_signer_in_ca_names(ca_names):
-                        priv_key = nss.find_key_by_any_cert(cert, password)
-                        return cert, priv_key
-            except NSPRError, e:
-                logging.debug("client auth callback failed %s" % str(e))
-                return False
-        return False
-
 def get_value(s):
     """
     Parse out a name/value pair from a Javascript variable.