weblatebot / certmonger

Forked from certmonger 3 years ago
Clone

e840b62 Verify that the AES-128 is used for encrypting the local CA

Authored and Committed by rcritten 2 years ago
    Verify that the AES-128 is used for encrypting the local CA
    
    OpenSSL by default used very old defaults, RC2-CBC and 3DES, for
    encryption. This resulted in a credential that was unusable if
    FIPS was enabled.
    
    Both values are now hardcoded to AES-128-CBC so that it is both
    more modern and will work in all situations. This tests that
    nothing has changed.
    
    Related: https://bugzilla.redhat.com/show_bug.cgi?id=1950132
    
    Signed-off-by: Rob Crittenden <rcritten@redhat.com>
    
        
file modified
+16 -0