[Freeipa-devel] [freeipa PR#737][comment] Vault: Explicitly default to 3DES CBC

2017-04-28 Thread MartinBasti
URL: https://github.com/freeipa/freeipa/pull/737 Title: #737: Vault: Explicitly default to 3DES CBC MartinBasti commented: """ master: * 5197422ef65e7239fc56c562ab87d99388a38a8d Vault: Explicitly default to 3DES CBC ipa-4-5: * e94a1d18653fe2e9558ac0b70bdf2ddd1f78d150 Vault: Explicitly

[Freeipa-devel] [freeipa PR#737][comment] Vault: Explicitly default to 3DES CBC

2017-04-27 Thread frasertweedale
URL: https://github.com/freeipa/freeipa/pull/737 Title: #737: Vault: Explicitly default to 3DES CBC frasertweedale commented: """ Tested; fix makes it work again against Dogtag (where Dogtag does not contain Ade's fix). ACK. """ See the full comment at

[Freeipa-devel] [freeipa PR#737][comment] Vault: Explicitly default to 3DES CBC

2017-04-27 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/737 Title: #737: Vault: Explicitly default to 3DES CBC tiran commented: """ I talked to Matt. Dogtag 10.4 will not be pushed to F25 and F26, only rawhide/F27. Additionally, Ade will also address the bug in Dogtag. The next 10.4 release will have a

[Freeipa-devel] [freeipa PR#737][comment] Vault: Explicitly default to 3DES CBC

2017-04-26 Thread pvoborni
URL: https://github.com/freeipa/freeipa/pull/737 Title: #737: Vault: Explicitly default to 3DES CBC pvoborni commented: """ Should go to 4.4.5 unless pki-core-10.4.0-1 is removed from f25. Blocking new Dogtag update in 4.4 doesn't seem right to me. """ See the full comment at

[Freeipa-devel] [freeipa PR#737][comment] Vault: Explicitly default to 3DES CBC

2017-04-26 Thread tiran
URL: https://github.com/freeipa/freeipa/pull/737 Title: #737: Vault: Explicitly default to 3DES CBC tiran commented: """ * I haven't verified that the patch actually solves the problem * Needs backport to at least 4.5 * Either needs backport to 4.4 or 4.4 must required Dogtag < 10.4 """ See