Discussion:
[Freeipa-devel] [freeipa PR#733][opened] [4.5] Fix CA/server cert validation in FIPS
stlaz
2017-04-26 06:35:58 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/733
Author: stlaz
Title: #733: [4.5] Fix CA/server cert validation in FIPS
Action: opened

PR body:
"""
In FIPS, the NSS library needs to be passed passwords to perform
certificate validation. Should we not have passed it and the NSS
guys have not fixed this yet, we would get SEC_ERROR_BAD_SIGNATURE
which is completely different error than one would expect but
that's just how things are with NSS right now.

https://pagure.io/freeipa/issue/6897
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/733/head:pr733
git checkout pr733
Akasurde
2017-04-27 10:33:48 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/733
Title: #733: [4.5] Fix CA/server cert validation in FIPS

Label: +ack
stlaz
2017-04-27 10:40:21 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/733
Author: stlaz
Title: #733: [4.5] Fix CA/server cert validation in FIPS
Action: synchronized

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/733/head:pr733
git checkout pr733
stlaz
2017-04-27 10:42:10 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/733
Title: #733: [4.5] Fix CA/server cert validation in FIPS

stlaz commented:
"""
Made a quickfix according to @tiran, the ACK can stay. Thanks, I was being paranoid.
"""

See the full comment at https://github.com/freeipa/freeipa/pull/733#issuecomment-297678732
stlaz
2017-04-28 11:30:39 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/733
Author: stlaz
Title: #733: [4.5] Fix CA/server cert validation in FIPS
Action: synchronized

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/733/head:pr733
git checkout pr733
MartinBasti
2017-04-28 12:11:30 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/733
Title: #733: [4.5] Fix CA/server cert validation in FIPS

Label: +pushed
MartinBasti
2017-04-28 12:11:35 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/733
Title: #733: [4.5] Fix CA/server cert validation in FIPS

MartinBasti commented:
"""
ipa-4-5:

* 651d132b701b773b2bbeb41496d6c5ddbf6d19b3 Fix CA/server cert validation in FIPS


"""

See the full comment at https://github.com/freeipa/freeipa/pull/733#issuecomment-297982146
MartinBasti
2017-04-28 12:11:39 UTC
Permalink
URL: https://github.com/freeipa/freeipa/pull/733
Author: stlaz
Title: #733: [4.5] Fix CA/server cert validation in FIPS
Action: closed

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/733/head:pr733
git checkout pr733

Loading...