Commits on Mar 13, 2018

1. Fix OTP validation in FIPS mode …

   NSS doesn't allow keys to be loaded directly in FIPS mode. To work around
   this, we encrypt the input key using an ephemeral key and then unwrap the
   encrypted key.
   
   https://pagure.io/freeipa/issue/7168
   
   Reviewed-By: Rob Crittenden <rcritten@redhat.com>

   

   npmccallum authored and rcritten committed Mar 13, 2018
   Configuration menu

   • View commit details
   • Copy full SHA for 4e7013b
   • Browse repository at this point

   Copy the full SHA

   4e7013b View commit details

   Browse the repository at this point in the history

2. Increase the default token key size …

   The previous default token key size would fail in FIPS mode for the sha384
   and sha512 algorithms. With the updated key size, the default will work in
   all cases.
   
   https://pagure.io/freeipa/issue/7168
   
   Reviewed-By: Rob Crittenden <rcritten@redhat.com>

   

   npmccallum authored and rcritten committed Mar 13, 2018
   Configuration menu

   • View commit details
   • Copy full SHA for 00044ac
   • Browse repository at this point

   Copy the full SHA

   00044ac View commit details

   Browse the repository at this point in the history

3. Revert "Don't allow OTP or RADIUS in FIPS mode" …

   This reverts commit 16a952a.
   
   OTP now works in FIPS mode. RADIUS can be made to be compliant by wrapping
   traffic in a VPN.
   
   https://pagure.io/freeipa/issue/7168
   https://pagure.io/freeipa/issue/7243
   
   Reviewed-By: Rob Crittenden <rcritten@redhat.com>

   

   npmccallum authored and rcritten committed Mar 13, 2018
   Configuration menu

   • View commit details
   • Copy full SHA for e04b93f
   • Browse repository at this point

   Copy the full SHA

   e04b93f View commit details

   Browse the repository at this point in the history