Currently ipa-kra-install invokes pki tool by passing clear text passwords as command line arguments so the passwords are logged in the ipa-server-kra-install.log. The invocation should be changed to use password files instead.
Proposed milestone: 4.2.1
freeipa-edewata-0376-Removed-clear-text-passwords-from-KRA-install-log.patch freeipa-edewata-0376-Removed-clear-text-passwords-from-KRA-install-log.patch
Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1256853
Endi sent the patch.
master:
ipa-4-2:
Metadata Update from @edewata: - Issue assigned to edewata - Issue set to the milestone: FreeIPA 4.2.1
Login to comment on this ticket.