Commit - freeipa - 5197422ef65e7239fc56c562ab87d99388a38a8d

freeipa

`5197422` Vault: Explicitly default to 3DES CBC

1 file Authored by cheimes 7 years ago, Committed by mbasti 7 years ago,

raw patch tree parent

1 file changed. 10 lines added. 2 lines removed.

    Vault: Explicitly default to 3DES CBC
    
    The server-side plugin for IPA Vault relied on the fact that the default
    oid for encryption algorithm is 3DES in CBC mode (DES-EDE3-CBC). Dogtag
    10.4 has changed the default from 3DES to AES. Pass the correct
    algorithm OID to KeyClient.archive_encrypted_data().
    
    Closes: https://pagure.io/freeipa/issue/6899
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>

ipaserver/plugins/vault.py

file modified

+10 -2

freeipa

Source Code

5197422 Vault: Explicitly default to 3DES CBC

1 file Authored by cheimes 7 years ago, Committed by mbasti 7 years ago,

`5197422` Vault: Explicitly default to 3DES CBC