summaryrefslogtreecommitdiffstats
path: root/base/server/sbin
diff options
context:
space:
mode:
authorMatthew Harmsen <mharmsen@redhat.com>2017-05-16 12:58:17 -0600
committerMatthew Harmsen <mharmsen@redhat.com>2017-05-16 12:58:17 -0600
commit641180a465d7fdf12a978c9c458e39bf6829cac2 (patch)
tree1adf1f659c785712d161959d18e7cf64e010265a /base/server/sbin
parent3edee861f0f31910020825a4bdc18f36017b6a26 (diff)
downloadpki-641180a465d7fdf12a978c9c458e39bf6829cac2.tar.gz
pki-641180a465d7fdf12a978c9c458e39bf6829cac2.tar.xz
pki-641180a465d7fdf12a978c9c458e39bf6829cac2.zip
Added FIPS class to pkispawn
Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails dogtagpki Pagure Issue #2684 - CA installation with HSM in FIPS mode fails
Diffstat (limited to 'base/server/sbin')
-rwxr-xr-xbase/server/sbin/pkispawn10
1 files changed, 10 insertions, 0 deletions
diff --git a/base/server/sbin/pkispawn b/base/server/sbin/pkispawn
index e6e337b8d..9394b8e47 100755
--- a/base/server/sbin/pkispawn
+++ b/base/server/sbin/pkispawn
@@ -756,6 +756,16 @@ def print_final_install_information(mdict):
" is a clone." %
(deployer.subsystem_name, mdict['pki_instance_name']))
+ if mdict['pki_fips_mode_enabled']:
+ print()
+ print(" This %s subsystem of the '%s' instance\n"
+ " has FIPS mode enabled on this operating system." %
+ (deployer.subsystem_name, mdict['pki_instance_name']))
+ print()
+ print(" REMINDER: Don't forget to update the appropriate FIPS\n"
+ " algorithms in server.xml in the '%s' instance."
+ % mdict['pki_instance_name'])
+
print(log.PKI_CHECK_STATUS_MESSAGE % mdict['pki_instance_name'])
print(log.PKI_INSTANCE_RESTART_MESSAGE % mdict['pki_instance_name'])