|
 |
1a0d7a |
From 0d44e959e5bbe822b51137a8e7cf48fa25533805 Mon Sep 17 00:00:00 2001
|
|
|
1a0d7a |
From: Rafael Guterres Jeffman <rjeffman@redhat.com>
|
|
|
1a0d7a |
Date: Fri, 10 Dec 2021 12:15:36 -0300
|
|
|
1a0d7a |
Subject: [PATCH] Revert "freeipa.spec: depend on bind-dnssec-utils"
|
|
|
1a0d7a |
|
|
|
1a0d7a |
This reverts commit f89d59b6e18b54967682f6a37ce92ae67ab3fcda.
|
|
|
1a0d7a |
---
|
|
|
1a0d7a |
freeipa.spec.in | 4 +---
|
|
|
1a0d7a |
ipaplatform/base/paths.py | 2 +-
|
|
|
1a0d7a |
ipaplatform/fedora/paths.py | 1 +
|
|
|
1a0d7a |
ipaserver/dnssec/bindmgr.py | 1 -
|
|
|
1a0d7a |
4 files changed, 3 insertions(+), 5 deletions(-)
|
|
|
1a0d7a |
|
|
|
1a0d7a |
diff --git a/freeipa.spec.in b/freeipa.spec.in
|
|
|
1a0d7a |
index 8f5c370e5..e20edb7bc 100755
|
|
|
1a0d7a |
--- a/freeipa.spec.in
|
|
|
1a0d7a |
+++ b/freeipa.spec.in
|
|
|
1a0d7a |
@@ -576,11 +576,9 @@ Requires: %{name}-server = %{version}-%{release}
|
|
|
1a0d7a |
Requires: bind-dyndb-ldap >= 11.2-2
|
|
|
1a0d7a |
Requires: bind >= %{bind_version}
|
|
|
1a0d7a |
Requires: bind-utils >= %{bind_version}
|
|
|
1a0d7a |
-# bind-dnssec-utils is required by the OpenDNSSec integration
|
|
|
1a0d7a |
-# https://pagure.io/freeipa/issue/9026
|
|
|
1a0d7a |
-Requires: bind-dnssec-utils >= %{bind_version}
|
|
|
1a0d7a |
%if %{with bind_pkcs11}
|
|
|
1a0d7a |
Requires: bind-pkcs11 >= %{bind_version}
|
|
|
1a0d7a |
+Requires: bind-pkcs11-utils >= %{bind_version}
|
|
|
1a0d7a |
%else
|
|
|
1a0d7a |
Requires: softhsm >= %{softhsm_version}
|
|
|
1a0d7a |
Requires: openssl-pkcs11 >= %{openssl_pkcs11_version}
|
|
|
1a0d7a |
diff --git a/ipaplatform/base/paths.py b/ipaplatform/base/paths.py
|
|
|
1a0d7a |
index 7d21367ec..42a47f1df 100644
|
|
|
1a0d7a |
--- a/ipaplatform/base/paths.py
|
|
|
1a0d7a |
+++ b/ipaplatform/base/paths.py
|
|
|
1a0d7a |
@@ -259,7 +259,7 @@ class BasePathNamespace:
|
|
|
1a0d7a |
IPA_PKI_RETRIEVE_KEY = "/usr/libexec/ipa/ipa-pki-retrieve-key"
|
|
|
1a0d7a |
IPA_HTTPD_PASSWD_READER = "/usr/libexec/ipa/ipa-httpd-pwdreader"
|
|
|
1a0d7a |
IPA_PKI_WAIT_RUNNING = "/usr/libexec/ipa/ipa-pki-wait-running"
|
|
|
1a0d7a |
- DNSSEC_KEYFROMLABEL = "/usr/sbin/dnssec-keyfromlabel"
|
|
|
1a0d7a |
+ DNSSEC_KEYFROMLABEL = "/usr/sbin/dnssec-keyfromlabel-pkcs11"
|
|
|
1a0d7a |
GETSEBOOL = "/usr/sbin/getsebool"
|
|
|
1a0d7a |
GROUPADD = "/usr/sbin/groupadd"
|
|
|
1a0d7a |
USERMOD = "/usr/sbin/usermod"
|
|
|
1a0d7a |
diff --git a/ipaplatform/fedora/paths.py b/ipaplatform/fedora/paths.py
|
|
|
1a0d7a |
index 4e993c063..92a948966 100644
|
|
|
1a0d7a |
--- a/ipaplatform/fedora/paths.py
|
|
|
1a0d7a |
+++ b/ipaplatform/fedora/paths.py
|
|
|
1a0d7a |
@@ -36,6 +36,7 @@ class FedoraPathNamespace(RedHatPathNamespace):
|
|
|
1a0d7a |
NAMED_CRYPTO_POLICY_FILE = "/etc/crypto-policies/back-ends/bind.config"
|
|
|
1a0d7a |
if HAS_NFS_CONF:
|
|
|
1a0d7a |
SYSCONFIG_NFS = '/etc/nfs.conf'
|
|
|
1a0d7a |
+ DNSSEC_KEYFROMLABEL = "/usr/sbin/dnssec-keyfromlabel"
|
|
|
1a0d7a |
|
|
|
1a0d7a |
|
|
|
1a0d7a |
paths = FedoraPathNamespace()
|
|
|
1a0d7a |
diff --git a/ipaserver/dnssec/bindmgr.py b/ipaserver/dnssec/bindmgr.py
|
|
|
1a0d7a |
index 0c79cc03d..a15c0e601 100644
|
|
|
1a0d7a |
--- a/ipaserver/dnssec/bindmgr.py
|
|
|
1a0d7a |
+++ b/ipaserver/dnssec/bindmgr.py
|
|
|
1a0d7a |
@@ -127,7 +127,6 @@ class BINDMgr:
|
|
|
1a0d7a |
)
|
|
|
1a0d7a |
cmd = [
|
|
|
1a0d7a |
paths.DNSSEC_KEYFROMLABEL,
|
|
|
1a0d7a |
- '-E', 'pkcs11',
|
|
|
1a0d7a |
'-K', workdir,
|
|
|
1a0d7a |
'-a', attrs['idnsSecAlgorithm'][0],
|
|
|
1a0d7a |
'-l', uri
|
|
|
1a0d7a |
--
|
|
|
1a0d7a |
2.31.1
|
|
|
1a0d7a |
|