Plugins » Katello

Make it possible to run `katello-ssl-tool` concurrently for different hosts

The use of a postrun script file in a "shared" location made it impossible before this fix.

```
Traceback (most recent call last):
File "/bin/katello-ssl-tool", line 11, in <module>...

cleanup

ensure glibc-langpack-en is present

install docbook-utils from powertools on EL8

make test.sh work on EL9

stop testing on centos 7, start testing on centos stream 9

drop Python 2.7 from tests, add 3.9

2.7 was EL7 which we do not support anymore
3.9 is EL9

Fixes #34604 - Revert "Revert "Switch from genrsa to genpkey""

This reverts commit e17529ebfc0590ff6140ab33bc19f67b95e8cbaa.

genrsa is deprecated and genpkey is the replacement. Additionally,
FIPS enablement enforces this.

Bump version to 2.9.0

Revert "Switch from genrsa to genpkey"

This reverts commit 363f0e118c2b4b672f1ae8bcd3a08f0d0a0c72e5.

I left the CRYPTO change in sslToolConfig.py in, as it doesn't seem to
break anything.

Remove trivial unused test functions

Rewrite RPM version comparison code

Release 2.8.1

drop checksum_type

nothing seems to use it since the original import of the code in
996da43f313ad4b500c104a8bbacb85324e4fc27

use latest centos containers from quay

don't fail decoding data from RPM

some versions of the RPM bindings will return strings, some bytes, some
unicode… And only some of these know decode().
So let's just catch that AttributeError and assume there is nothing to
decode if it's raised.

Fixes running certs tools on EL 8.5+ which got a "fixed" RPM....

Switch from genrsa to genpkey

The openssl genrsa command is deprecated and does not work in all cases,
for example genrsa does not work on FIPS enabled EL8 hosts. This
switches to using genpkey and aes256 for crypto rather than the
deprecated des3.

Do not set the RPM digest algorithm

Hard coding the RPM digest alogrithm used can lead to RPMs that
do not work on some platforms like a FIPS enabled EL8 system. This
drops the parameter and lets the system dictate the values. This
change originally existed to support EL5 systems that needed the...

Release 2.8.0

Do not generate certificates in text format

Prior to this change certificates were generated in text format
which means they included as a header the x509 metadata information
rather than just the PEM encoded certificate. For some applications
this text based format can break them. In other cases, such as...

Remove unused exception

Remove unused getTarballFilename function

e2d3a1db9bbbaffcec447b2006091aee2c372160 removed the last caller of this
function.

Remove incSerial

This method effectively does int(hex(n), 16) + 1 with additional
safeguards. However, since n is already an int, it's entirely redundant
and it can be simplified to n = n + 1.

Release 2.7.3

don't use eval() to convert hex strings to integers