0451db9 Enable TLS 1.3 support on the server

Authored and Committed by cheimes 4 years ago
    Enable TLS 1.3 support on the server
    
    urllib3 now supports post-handshake authentication with TLS 1.3. Enable
    TLS 1.3 support for Apache HTTPd.
    
    The update depends on bug fixes for TLS 1.3 PHA support in urllib3 and
    Apache HTTPd. New builds are available in freeipa-master COPR and in
    F30/F31.
    
    Overwrite crypto-policy on Fedora only. Fedora 31 and earlier have TLS
    1.0 and 1.1 still enabled by default.
    
    Fixes: https://pagure.io/freeipa/issue/8125
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>
    Reviewed-By: Thomas Woerner <twoerner@redhat.com>
    
        
file modified
+7 -0
file modified
+1 -1
file modified
+4 -0
file modified
+12 -1
file modified
+4 -4