[Freeipa-devel] [freeipa PR#367][comment] Remove nsslib from IPA
tiran
freeipa-github-notification at redhat.com
Wed Jan 4 10:02:35 UTC 2017
URL: https://github.com/freeipa/freeipa/pull/367
Title: #367: Remove nsslib from IPA
tiran commented:
"""
* Ticket 5695 is about ```FreeIPA on FIPS enabled systems```. Moving from NSS to OpenSSL is a big change and should be tracked by its own ticket.
* Are customers fine with the fact that FreeIPA clients will no longer very CRLs? OpenSSL does not automatically download and verify CRLs. OCSP is not yet supported by Python's ssl module.
"""
See the full comment at https://github.com/freeipa/freeipa/pull/367#issuecomment-270335111
More information about the Freeipa-devel
mailing list