freeipa

#8020 support AES in LWCA key replication
Closed: fixed by ftweedal. Opened by ftweedal.

Closed: fixed
Reopen Issue

Request for enhancement

https://pagure.io/dogtagpki/issue/2666 and https://pagure.io/dogtagpki/issue/2777 add support to Dogtag for AES wrapping of LWCA keys. Some changes are needed on the FreeIPA side to support this, too.

Metadata Update from @ftweedal:
- Issue assigned to ftweedal

PR (WIP): https://github.com/freeipa/freeipa/pull/3483

master:

  • 7e92e65190c04cc3c4699dbba329cbd6696576f1 IPASecStore: support extra key arguments
  • 8fbcc3353467026e181f24cd527fe4e30f63aab4 NSSWrappedCertDB: accept optional symmetric algorithm
  • bfead9ce66fb7552f9afaea18fb72a09fbe5f1c2 ipa-pki-retrieve-key: request AES encryption (with fallback)
  • 7c7a827c0973669c55e4badcb6ab4f02993852a6 (HEAD) Bump Dogtag min version to 10.7.3

ipa-4-8:

  • a305f674ecfea4a1e238c3eaeb9c29110696f6f5 IPASecStore: support extra key arguments
  • 979f25c58c7f29f8010a20ff8e499bb75365ba43 NSSWrappedCertDB: accept optional symmetric algorithm
  • abc28bec36b7c133d4b08c764645941dbaf4f262 ipa-pki-retrieve-key: request AES encryption (with fallback)
  • af5f2b847a593464fb4ca42a20dc25586baf7e17 (HEAD) Bump Dogtag min version to 10.7.3

Metadata Update from @ftweedal:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.