freeipa.git/install/tools/ipa-httpd-pwdreader, branch fix_ber_scanf

Try to resolve the name passed into the password reader to a file

2018-09-19T15:42:49+00:00

Rather than comparing the value passed in by Apache to a
hostname value just see if there is a file of that name in
/var/lib/ipa/passwds.

Use realpath to see if path information was passed in as one of
the options so that someone can't try to return random files from
the filesystem.

https://pagure.io/freeipa/issue/7528

Signed-off-by: Rob Crittenden 
Reviewed-By: Alexander Bokovoy

Encrypt httpd key stored on disk

2018-03-23T11:48:46+00:00

This commit adds configuration for HTTPD to encrypt/decrypt its
key which we currently store in clear on the disc.

A password-reading script is added for mod_ssl. This script is
extensible for the future use of directory server with the
expectation that key encryption/decription will be handled
similarly by its configuration.

https://pagure.io/freeipa/issue/7421

Reviewed-By: Rob Crittenden 
Reviewed-By: Christian Heimes