freeipa

#6398 Refactor certificate inspection code to use python-cryptography
Closed: Fixed Opened by ftweedal.

Closed: Fixed
Reopen Issue

We wish to refactor ipalib.x509 and ipalib.pkcs10 to use
python-cryptography instead of NSS for certificate/CSR
parsing and inspection.

master:

  • 9522970bfa28900abc90e959de483f59c79a3e5f dn: support conversion from python-cryptography Name
  • 66637f766dd0ddc50888013962be2294fd8d0e9a pkcs10: use python-cryptography for CSR processing
  • 85487281cdc09720f6a0385ebb7157742d762a0c pkcs10: remove pyasn1 PKCS #10 spec
  • 44c2d685f01eb4c03e4659125e41d73b8be47c19 x509: avoid use of nss.data_to_hex
  • c57dc890b2bf447ab575f2e91249179bce3f05d5 x509: use pyasn1-modules X.509 specs
  • db116f73fe5fc199bb2e28103cf5e3e2a24eab4c x509: use python-cryptography to process certs
  • b0430b67dc90fddf1e35fde9a0cf2977a07d7cbd Remove main code from ipalib.x509 and ipalib.pkcs10

Reopened because of missing requirement https://github.com/freeipa/freeipa/pull/303 .

master:

  • a8b7dbff8ac660a28faf7ef43c7a0952171423b8 Add python-pyasn1-modules into dependencies

Metadata Update from @ftweedal:
- Issue assigned to ftweedal
- Issue set to the milestone: FreeIPA 4.5
Metadata
None
None
None
Normal
refactoring
Certificate management
jcholast, frenaud
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.