URL: https://github.com/freeipa/freeipa/pull/2700 Author: tiran Title: #2700: Require 3.41.0-3 on Fedora 28 Action: opened
PR body: """ nss-3.41.0-3.fc28 fixes an issue with p11-kit crypto policy that caused OpenLDAP to fail when SoftHSM2 is installed. The build is available in Fedora updates-testing and @freeipa/freeipa-master COPR. nss-3.41.0-1.fc29 will land in stable today. See: https://pagure.io/freeipa/issue/7810 Signed-off-by: Christian Heimes <[email protected]> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/2700/head:pr2700 git checkout pr2700
From 8841dc67b78b32d42377074b97f5df55ef0d0d98 Mon Sep 17 00:00:00 2001 From: Christian Heimes <[email protected]> Date: Fri, 14 Dec 2018 11:21:42 +0100 Subject: [PATCH] Require 3.41.0-3 on Fedora 28 nss-3.41.0-3.fc28 fixes an issue with p11-kit crypto policy that caused OpenLDAP to fail when SoftHSM2 is installed. The build is available in Fedora updates-testing and @freeipa/freeipa-master COPR. nss-3.41.0-1.fc29 will land in stable today. See: https://pagure.io/freeipa/issue/7810 Signed-off-by: Christian Heimes <[email protected]> --- .test_runner_config.yaml | 2 -- freeipa.spec.in | 10 +++++++--- 2 files changed, 7 insertions(+), 5 deletions(-) diff --git a/.test_runner_config.yaml b/.test_runner_config.yaml index c7467ad6b3..3ba83731a2 100644 --- a/.test_runner_config.yaml +++ b/.test_runner_config.yaml @@ -50,8 +50,6 @@ steps: install_packages: - sed -i 's/%_install_langs \(.*\)/\0:fr/g' /etc/rpm/macros.image-language-conf - dnf install -y ${container_working_dir}/dist/rpms/*.rpm --best --allowerasing - # nss-p11-kit causes OpenLDAP's TLSMC patch to block - - rm -f /etc/crypto-policies/local.d/nss-p11-kit.config && update-crypto-policies install_server: - ipa-server-install -U --domain ${server_domain} --realm ${server_realm} -p ${server_password} -a ${server_password} --setup-dns --setup-kra --auto-forwarders diff --git a/freeipa.spec.in b/freeipa.spec.in index 92e6bf2ac6..9ec79f0772 100644 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -82,9 +82,13 @@ # and https://pagure.io/dogtagpki/issue/3073 %global pki_version 10.6.8-3 -# NSS release with fix for CKA_LABEL import bug in shared SQL database. -# https://bugzilla.redhat.com/show_bug.cgi?id=1568271 -%global nss_version 3.36.1-1.1 +# NSS release with fix for p11-kit-proxy issue, affects F28 +# https://pagure.io/freeipa/issue/7810 +%if 0%{?fedora} = 28 +%global nss_version 3.41.0-3 +%else +%global nss_version 3.41.0-1 +%endif # One-Way Trust authenticated by trust secret # https://bugzilla.redhat.com/show_bug.cgi?id=1345975#c20
_______________________________________________ FreeIPA-devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedorahosted.org/archives/list/[email protected]
