freeipa

#6730 Harden client HTTPS connections
Closed: fixed Opened by stlaz.

Closed: fixed
Reopen Issue

freeipa#dfd560a1 reworked HTTPS backend for FreeIPA client connections. It uses very basic SSL settings which permit some old ciphers/hashes which used alone are vulnerable.
Harden the settings of this HTTPS connection not to use old and industry deprecated methods.

Metadata Update from @stlaz:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/544

Metadata Update from @stlaz:
- Issue assigned to stlaz

Metadata Update from @stlaz:
- Issue assigned to stlaz

master:

  • fda22c33441d3b2c541a272e411ac1503a20fb01 Don't use weak ciphers for client HTTPS connections

Metadata Update from @tkrizek:
- Issue close_status updated to: fixed
- Issue priority set to: 3
- Issue set to the milestone: FreeIPA 4.5
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
Normal
https://github.com/freeipa/freeipa/pull/544
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.