Francisco Trivino 305fcc25b4 kra: set RSA-OAEP as default wrapping algo when FIPS is enabled ...

Vault uses PKCS1v15 as default padding wrapping algo, which is not an approved
FIPS algorithm. This commit ensures that KRA is installed with RSA-OAEP if FIPS
is enabled. It also handles upgrade path.

Fixes: https://pagure.io/freeipa/issue/9191

Signed-off-by: Francisco Trivino <ftrivino@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2024-01-30 10:18:02 -05:00

..

__init__.py

pylint: disable using-constant-test

2023-01-10 08:30:58 +01:00

install.py

Uninstaller: uninstall PKI before shutting down services

2023-06-21 21:08:17 +02:00

replicainstall.py

Server affinity: call ca.install() if there is a CA in the topology

2024-01-23 16:32:58 +01:00

upgrade.py

kra: set RSA-OAEP as default wrapping algo when FIPS is enabled

2024-01-30 10:18:02 -05:00