From 31027c6183e3df927b08f0f0b7f84ae7420c3e88 Mon Sep 17 00:00:00 2001 From: John Dennis Date: Mon, 31 May 2010 07:40:17 -0400 Subject: use NSS for SSL operations --- ipaserver/install/cainstance.py | 24 ------------------------ 1 file changed, 24 deletions(-) (limited to 'ipaserver/install/cainstance.py') diff --git a/ipaserver/install/cainstance.py b/ipaserver/install/cainstance.py index 90028b41..035d6315 100644 --- a/ipaserver/install/cainstance.py +++ b/ipaserver/install/cainstance.py @@ -125,30 +125,6 @@ def import_pkcs12(input_file, input_passwd, cert_database, "-k", cert_passwd, "-w", input_passwd]) -def client_auth_data_callback(ca_names, chosen_nickname, password, certdb): - cert = None - if chosen_nickname: - try: - cert = nss.find_cert_from_nickname(chosen_nickname, password) - priv_key = nss.find_key_by_any_cert(cert, password) - return cert, priv_key - except NSPRError, e: - logging.debug("client auth callback failed %s" % str(e)) - return False - else: - nicknames = nss.get_cert_nicknames(certdb, nss.SEC_CERT_NICKNAMES_USER) - for nickname in nicknames: - try: - cert = nss.find_cert_from_nickname(nickname, password) - if cert.check_valid_times(): - if cert.has_signer_in_ca_names(ca_names): - priv_key = nss.find_key_by_any_cert(cert, password) - return cert, priv_key - except NSPRError, e: - logging.debug("client auth callback failed %s" % str(e)) - return False - return False - def get_value(s): """ Parse out a name/value pair from a Javascript variable. -- cgit