Christian Heimes 895e99b684 Support AES for KRA archival wrapping ...

The vault plugin has used TripleDES (des-ede3-cbc) as default wrapping
algorithm since the plugin was introduced. Allow use of AES-128-CBC as
alternative wrapping algorithm for transport of secrets.

Fixes: https://pagure.io/freeipa/issue/6524

Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

2022-03-16 16:24:02 +02:00

..

advise

pylint: Skip raising-bad-type

2022-03-14 10:44:55 -04:00

custodia

pylint: Fix useless-suppression

2022-03-14 10:44:55 -04:00

dnssec

pylint: Fix useless-suppression

2022-03-14 10:44:55 -04:00

install

Kerberos instance: default to AES256-SHA2 for master key encryption

2022-03-16 16:21:52 +02:00

plugins

Support AES for KRA archival wrapping

2022-03-16 16:24:02 +02:00

secrets

Custodia: use a stronger encryption algo when exporting keys

2022-02-01 08:57:24 +01:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc_common.py

Py3: Replace six.text_type with str

2018-09-27 16:11:18 +02:00

dcerpc.py

pylint: Fix unused-variable

2022-03-14 10:44:55 -04:00

dns_data_management.py

Add URI system records for KDC

2021-09-01 09:18:20 +02:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

masters.py

Add hidden replica feature

2019-03-28 17:57:58 +01:00

p11helper.py

Grammar: whitespace is a word

2020-06-23 10:16:29 +02:00

rpcserver.py

pylint: Fix unused-variable

2022-03-14 10:44:55 -04:00

servroles.py

Use api.env.container_sysaccounts

2020-04-28 11:28:29 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Also drop Custodia client and forwarder

2021-06-17 09:51:45 +02:00

topology.py

pylint: Fix consider-using-dict-items

2022-03-14 10:44:55 -04:00

wsgi.py

Improve wsgi app loading

2021-04-07 12:40:30 -04:00