diff options
| author | Stanislav Laznicka <slaznick@redhat.com> | 2016-12-20 10:05:36 +0100 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2017-03-01 09:43:41 +0000 |
| commit | dfd560a190cb2ab13f34ed9e21c5fb5c6e793f18 (patch) | |
| tree | 586e69e13814db5a7feda437129944de0736eed0 /install/restart_scripts | |
| parent | 98e3b14a0477232054b02065c857fb1b16ce85a6 (diff) | |
| download | freeipa-dfd560a190cb2ab13f34ed9e21c5fb5c6e793f18.tar.gz freeipa-dfd560a190cb2ab13f34ed9e21c5fb5c6e793f18.tar.xz freeipa-dfd560a190cb2ab13f34ed9e21c5fb5c6e793f18.zip | |
Remove NSSConnection from the Python RPC module
NSSConnection was causing a lot of trouble in the past and there is
a lot of logic around it just to make it not fail. What's more,
when using NSS to create an SSL connection in FIPS mode, NSS
always requires database password which makes the `ipa` command
totally unusable.
NSSConnection is therefore replaced with Python's
httplib.HTTPSConnection which is OpenSSL based.
The HTTPSConnection is set up to handle authentication with client
certificate for connections to Dogtag server as RA agent. It allows
to handle client cert/private key in separate files and also
encrypted private key files.
https://fedorahosted.org/freeipa/ticket/5695
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Diffstat (limited to 'install/restart_scripts')
0 files changed, 0 insertions, 0 deletions