| commit | a66952e9628c1234fb549065863739e2fb4951e5 | [log] [tgz] |
|---|---|---|
| author | Gregory Thiemonge <gthiemon@redhat.com> | Thu Jul 21 12:21:40 2022 +0200 |
| committer | Gregory Thiemonge <gthiemon@redhat.com> | Thu Jul 21 12:29:56 2022 +0200 |
| tree | 284210a74a0ee0638ace0e49e1714bbb1a4ebd69 | |
| parent | 2f975b31c96f7141f2c5a1acfc4a5a9d17d59681 [diff] |
Fix generate_pkcs12_bundle for FIPS generate_pkcs12_bundle used the PKCS12 class of the pyOpenSSL module which is not compliant with FIPS (uses SHA1). Switch to the cryptography module for generating the PKCS bundles unless for really old releases (<=3.0) that don't support it (stable/train is still on 2.8). Change-Id: Ibd50e9a6e406683b7faba093d716c83d2b994ad7