On 09/11/2014 03:47 PM, Nathaniel McCallum wrote: > On Thu, 2014-09-11 at 15:46 +0200, Petr Viktorin wrote: >> On 09/11/2014 01:37 PM, Martin Kosek wrote: >>> Hi team, >>> >>> It seems we have pretty serious bug in our FreeIPA 4.0.2 release, breaking >>> upgrade from older releases: >>> >>> https://fedorahosted.org/freeipa/ticket/4529 >>> >>> We also have packaging fix requested by Fedora Server roles group: >>> >>> https://fedorahosted.org/freeipa/ticket/4430 >>> >>> It seems just these 2 bugs are enough for a quick FreeIPA 4.0.3 release... >>> Makes sense? Any other tickets or patches we would like to get in? >> >> Looks like it's just those two. I'll start releasing shortly. > > I'd like to get a fix in for the missing ciphers in the new NSS. I can > have a patch on the list shortly. > > Nathaniel
Isn't this related to https://fedorahosted.org/freeipa/ticket/4395 ? I think we do not work with the newest DS which fixed the default ciphers. Don't we need to set our SSL ciphers setting to https://fedorahosted.org/389/ticket/47838#comment:29 ? If yes, I think this is definitely a 4.0.3 candidate. Martin _______________________________________________ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel