Project

General

Profile

Statistics
| Branch: | Tag: | Revision:
Name Size
__init__.py 625 Bytes
fileutils.py 7.67 KB
katello_ssl_tool.py 32.4 KB
sslToolCli.py 18.3 KB
sslToolConfig.py 25.9 KB
sslToolLib.py 3.12 KB
timeLib.py 1.38 KB

Latest revisions

# Date Author Comment
2210541a 02/22/2024 12:53 PM Pablo Méndez Hernández

Make it possible to run `katello-ssl-tool` concurrently for different hosts

The use of a postrun script file in a "shared" location made it impossible before this fix.

```
Traceback (most recent call last):
File "/bin/katello-ssl-tool", line 11, in <module>...

571cae6c 03/14/2022 01:12 PM Eric Helms

Fixes #34604 - Revert "Revert "Switch from genrsa to genpkey""

This reverts commit e17529ebfc0590ff6140ab33bc19f67b95e8cbaa.

genrsa is deprecated and genpkey is the replacement. Additionally,
FIPS enablement enforces this.

e17529eb 11/22/2021 01:42 PM Evgeni Golov

Revert "Switch from genrsa to genpkey"

This reverts commit 363f0e118c2b4b672f1ae8bcd3a08f0d0a0c72e5.

I left the CRYPTO change in sslToolConfig.py in, as it doesn't seem to
break anything.

75664538 11/18/2021 06:50 PM Ewoud Kohl van Wijngaarden

Remove trivial unused test functions

517040c0 11/18/2021 06:50 PM Ewoud Kohl van Wijngaarden

Rewrite RPM version comparison code

73794b5f 11/18/2021 04:18 PM Evgeni Golov

drop checksum_type

nothing seems to use it since the original import of the code in
996da43f313ad4b500c104a8bbacb85324e4fc27

2c52b49c 11/18/2021 04:18 PM Evgeni Golov

don't fail decoding data from RPM

some versions of the RPM bindings will return strings, some bytes, some
unicode… And only some of these know decode().
So let's just catch that AttributeError and assume there is nothing to
decode if it's raised.

Fixes running certs tools on EL 8.5+ which got a "fixed" RPM....

363f0e11 09/30/2021 10:00 AM Eric Helms

Switch from genrsa to genpkey

The openssl genrsa command is deprecated and does not work in all cases,
for example genrsa does not work on FIPS enabled EL8 hosts. This
switches to using genpkey and aes256 for crypto rather than the
deprecated des3.

366d56f0 06/02/2021 12:16 AM Eric Helms

Do not generate certificates in text format

Prior to this change certificates were generated in text format
which means they included as a header the x509 metadata information
rather than just the PEM encoded certificate. For some applications
this text based format can break them. In other cases, such as...

bf754746 09/14/2020 05:43 PM Ewoud Kohl van Wijngaarden

Remove unused exception

View revisions

Also available in: Atom