freeipa

#7256 [RFE] user-friendly way to disable weak or deprecated ciphers
Opened by pvoborni. Modified

Open
Close Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1499119

Description of problem:
IPA should have user-friendly (command line, WEbUI) way to disable ciphers used
if admin found that they are too weak or if they are deprecated or if they
don't have compliance with local security standards.

Metadata Update from @pvoborni:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1499119

Metadata Update from @pvoborni:
- Issue tagged with: ux

Rather than coming up with our own system, we should rather implement #4853 (system-wide crypto policies) for FreeIPA, Dogtag, and 389-DS.
Metadata
None

ux

None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.