[Freeipa-devel] FreeIPA 4.0.3?

[Ludwig Krispenz]

On 09/11/2014 04:04 PM, Martin Kosek wrote:
> On 09/11/2014 03:47 PM, Nathaniel McCallum wrote:
>> On Thu, 2014-09-11 at 15:46 +0200, Petr Viktorin wrote:
>>> On 09/11/2014 01:37 PM, Martin Kosek wrote:
>>>> Hi team,
>>>>
>>>> It seems we have pretty serious bug in our FreeIPA 4.0.2 release, breaking
>>>> upgrade from older releases:
>>>>
>>>> https://fedorahosted.org/freeipa/ticket/4529
>>>>
>>>> We also have packaging fix requested by Fedora Server roles group:
>>>>
>>>> https://fedorahosted.org/freeipa/ticket/4430
>>>>
>>>> It seems just these 2 bugs are enough for a quick FreeIPA 4.0.3 release...
>>>> Makes sense? Any other tickets or patches we would like to get in?
>>> Looks like it's just those two. I'll start releasing shortly.
>> I'd like to get a fix in for the missing ciphers in the new NSS. I can
>> have a patch on the list shortly.
>>
>> Nathaniel
> Isn't this related to
> https://fedorahosted.org/freeipa/ticket/4395
> ? I think we do not work with the newest DS which fixed the default ciphers.
yes
>
> Don't we need to set our SSL ciphers setting to
>
> https://fedorahosted.org/389/ticket/47838#comment:29
yes
tjhe attached patch tries this, but at the moment I failed to build and 
also to upgrade to F21

>
> ? If yes, I think this is definitely a 4.0.3 candidate.
>
> Martin

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-ticket-4395-change-ciphers-enabled-by-default.patch
Type: text/x-patch
Size: 2267 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20140911/d729c492/attachment.bin>