Issue #8814: Use Dogtag's CryptographyCryptoProvider instead of NSSCryptoProvider for KRAClient() - freeipa

freeipa

#8814 Use Dogtag's CryptographyCryptoProvider instead of NSSCryptoProvider for KRAClient()

Closed: fixed 2 years ago by frenaud. Opened 3 years ago by cheimes.

Request for enhancement

KRAClient and kra backend in ipaserver.plugins.dogtag currently use NSSCryptoProvider to implement key and data wrapping. The NSS provider uses python-nss. We would like to drop the dependency.

Dogtag has support for PyCA cryptography-based crypto provider called CryptographyCryptoProvider for several years now.

Metadata Update from @cheimes:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/5726
- Issue tagged with: rfe

3 years ago

frenaud commented 3 years ago

master:

1d80048 Use PyCA crypto provider for KRAClient

frenaud commented 2 years ago

ipa-4-9:

0244a06 Use PyCA crypto provider for KRAClient

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Metadata

Assignee

None

Tags

Blocking

None

Depending on

None

Priority

None

Milestone

None

affects_doc

None

source

None

knownissue

None

type

None

blockedby

None

test_case

None

component

None

blocking

None

on_review

https://github.com/freeipa/freeipa/pull/5726

keywords

None

test_coverage

None

reviewer

None

external_tracker

None

rhbz

None

tester

None

changelog

None

design

None

freeipa

Source Code

#8814 Use Dogtag's CryptographyCryptoProvider instead of NSSCryptoProvider for KRAClient() Closed: fixed 2 years ago by frenaud. Opened 3 years ago by cheimes.

Request for enhancement

Metadata

rfe

#8814 Use Dogtag's CryptographyCryptoProvider instead of NSSCryptoProvider for KRAClient()

Closed: fixed 2 years ago by frenaud. Opened 3 years ago by cheimes.