freeipa

#8111 [FIPS] Don't add camellia KRB5 encsalttypes in FIPS mode
Closed: fixed by rcritten. Opened by cheimes.

Closed: fixed
Reopen Issue

install/share/kerberos.ldif does not install camellia encsalttypes in FIPS mode. The lines are disables with a conditional comment. But install/updates/50-krbenctypes.update is missing the same conditional. An update may install camellia based algorithms in FIPS mode.

Metadata Update from @cheimes:
- Issue assigned to cheimes

Metadata Update from @cheimes:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/3846

Metadata Update from @cheimes:
- Issue tagged with: fips

Metadata Update from @rcritten:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1768959

Issue linked to Bugzilla: Bug 1768959

master:

  • bc56642bf9e59821322903e7470be6ec1d857034 Block camellia in krbenctypes update in FIPS
  • 560acf37482fe5c7df1abd2d087e33a18b1cbe38 Skip commented lines after substitution

ipa-4-8:

  • 9023033e1867a1ed67628566e8db99fefaa1d4e9 Block camellia in krbenctypes update in FIPS
  • 6ab306a2a35b7dfed05b5a87d8ed647b1925c873 Skip commented lines after substitution

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata

fips

None
None
None
https://github.com/freeipa/freeipa/pull/3846
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.