Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-36442

Support changing the key-algorithm when connecting to ISC DHCP

XMLWordPrintable

    • Icon: Epic Epic
    • Resolution: Done-Errata
    • Icon: Normal Normal
    • 6.18.0
    • None
    • Provisioning
    • None
    • ISC DHCP key-algorithm
    • Done
    • False
    • sat-rocket
    • Enhancement
    • Hide
      .Satellite server accepts additional key algorithms for ISC DHCP

      Satellite uses the Object Management Application Programming Interface (OMAPI) protocol when connecting to ISC DHCP.
      With this update, you can configure the hash-based message authentication code (HMAC) algorithm used in the connection.
      As a result, you can use more secure algorithms than before this update, including algorithms that are compatible with the Federal Information Processing Standards (FIPS) if your Satellite server connects to ISC DHCP.
      Show
      .Satellite server accepts additional key algorithms for ISC DHCP Satellite uses the Object Management Application Programming Interface (OMAPI) protocol when connecting to ISC DHCP. With this update, you can configure the hash-based message authentication code (HMAC) algorithm used in the connection. As a result, you can use more secure algorithms than before this update, including algorithms that are compatible with the Federal Information Processing Standards (FIPS) if your Satellite server connects to ISC DHCP.
    • Done

      Foreman Proxy connects to ISC DHCP using omshell (which implements the OMAPI protocol). When it's hardened with a key it doesn't configure the used key algorithm. That defaults to HMAC-MD5, which is not allowed in FIPS.

              Unassigned Unassigned
              ekohlvan@redhat.com Ewoud Kohl van Wijngaarden
              Jan Fiala Jan Fiala
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: