Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-46625

CA Clone upgrade pkcs12 mac alg for FIPS mode

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • rhel-10.0.beta
    • pki-core
    • None
    • None
    • None
    • rhel-sst-idm-cs
    • ssg_idm
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None

      This represents a better fix for issue RHEL-45539, CA Clone Installation is failing with 'Error verifying PKCS12 MAC; no PKCS12KDF support.' in FIPS mode.

       

      That issue was resolved with a simple workaround fix for now. The preferred fix is to create the pk12 file for cloning a CA using a mac alg greater than the deprecated sha1, which is currently used.

              Unassigned Unassigned
              jmagne John Magne
              RHCS Maintenance RHCS Maintenance
              IdM CS QE IdM CS QE
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: