Uploaded image for project: 'Satellite'
  1. Satellite
  2. SAT-36442

Support changing the key-algorithm when connecting to ISC DHCP

XMLWordPrintable

    • Icon: Epic Epic
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • Provisioning
    • None
    • ISC DHCP key-algorithm
    • In Progress
    • False
    • sat-rocket
    • Enhancement
    • Hide
      .Satellite servers accept additional key algorithms for ISC DHCP

      Satellite uses the Object Management Application Programming Interface (OMAPI) protocol when connecting to ISC DHCP.
      With this update, the hash-based message authentication code (HMAC) algorithm is configurable.
      As a result, you can use more secure algorithms than before this update, and can use algorithms that are compatible with the Federal Information Processing Standards (FIPS) in Satellite servers that connect to ISC DHCP.
      Show
      .Satellite servers accept additional key algorithms for ISC DHCP Satellite uses the Object Management Application Programming Interface (OMAPI) protocol when connecting to ISC DHCP. With this update, the hash-based message authentication code (HMAC) algorithm is configurable. As a result, you can use more secure algorithms than before this update, and can use algorithms that are compatible with the Federal Information Processing Standards (FIPS) in Satellite servers that connect to ISC DHCP.
    • In Progress

      Foreman Proxy connects to ISC DHCP using omshell (which implements the OMAPI protocol). When it's hardened with a key it doesn't configure the used key algorithm. That defaults to HMAC-MD5, which is not allowed in FIPS.

              Unassigned Unassigned
              ekohlvan@redhat.com Ewoud Kohl van Wijngaarden
              Jan Fiala Jan Fiala
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: