[Freeipa-devel] [freeipa PR#733][opened] [4.5] Fix CA/server cert validation in FIPS

[stlaz]

   URL: https://github.com/freeipa/freeipa/pull/733
Author: stlaz
 Title: #733: [4.5] Fix CA/server cert validation in FIPS
Action: opened

PR body:
"""
In FIPS, the NSS library needs to be passed passwords to perform
certificate validation. Should we not have passed it and the NSS
guys have not fixed this yet, we would get SEC_ERROR_BAD_SIGNATURE
which is completely different error than one would expect but
that's just how things are with NSS right now.

https://pagure.io/freeipa/issue/6897
"""

To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/733/head:pr733
git checkout pr733
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pr-733.patch
Type: text/x-diff
Size: 2787 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20170426/ee873c85/attachment.bin>