URL: https://github.com/freeipa/freeipa/pull/367
Title: #367: Remove nsslib from IPA

tiran commented:
"""
* Ticket 5695 looks wrong, it's about ```FreeIPA on FIPS enabled systems```.
* Are customers fine with the fact that FreeIPA clients will no longer very 
CRLs? OpenSSL does not automatically download and verify CRLs. OCSP is not yet 
supported by Python's ssl module.
"""

See the full comment at 
https://github.com/freeipa/freeipa/pull/367#issuecomment-270335111
-- 
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code

Reply via email to