[Pkg-freeipa-devel] [Git][freeipa-team/dogtag-pki][upstream] 105 commits: Fix CA install doc

Timo Aaltonen gitlab at salsa.debian.org
Fri Mar 5 14:44:39 GMT 2021 


Timo Aaltonen pushed to branch upstream at FreeIPA packaging / dogtag-pki


Commits:
a40cfac8 by Endi S. Dewata at 2020-12-09T16:59:52-06:00
Fix CA install doc

- - - - -
7c2b99b8 by Endi S. Dewata at 2020-12-14T20:30:29-06:00
Fix SystemCertClient creation

The calls to SystemCertClient constructor have been modified
to provide the subsystem name. This is required to run the
healthcheck tool on a KRA installed separately from the CA.

- - - - -
dee48bda by Endi S. Dewata at 2020-12-14T20:30:29-06:00
Add test for installing KRA on separate instance

- - - - -
aa34aaf4 by Endi S. Dewata at 2020-12-16T08:56:35-06:00
Revert SystemCertClient changes

The commit c25b438024e4a0f3b6e91e359bd0aa34c25ea4e9 broke
IPA vault, so it has been reverted. The test for installing
KRA on a separate instance has been modified to disable the
healthcheck test.

- - - - -
3c894354 by Christina Fu at 2020-12-21T16:18:32-05:00
Bug1664435-SCEP ChallengePassword Class not found

This patch, together with the fix for "Bug1908541 jss broke SCEP - missing PasswordChallenge class", addresses the issue where  the class PasswordChallenge cannot be loaded due to Class Loader differences.
  jss is installed in the common CL (/usr/share/pki/server/common/lib/jss4.jar)
  the servlet classes are in webapp CL (/usr/share/pki/server/webapps/pki/WEB-INF/lib/pki-cms.jar)

In addition, this patch adds the upgrade sscript for the new path of ChallengePassword class which has been moved from pki into JSS.

fixes https://bugzilla.redhat.com/show_bug.cgi?id=1664435

- - - - -
a2b9a4b4 by Pritam Singh at 2021-01-05T18:35:15+05:30
Added_boolean_fix_for_fips_check

Signed-off-by: Pritam Singh <prisingh at redhat.com>

- - - - -
cc5840a7 by Endi S. Dewata at 2021-01-06T17:42:56-06:00
Refactor NSSDatabase.addExtensions()

The NSSDatabase.addExtensions() has been modified to take
a temporary directory to store files containing the data
for the new extension being added.

- - - - -
deb2eb8c by Endi S. Dewata at 2021-01-06T17:43:04-06:00
Add support for OCSPNoCheckExtension in pki nss-cert

The NSSDatabase and NSSExtensionGenerator have been modified
to support OCSPNoCheckExtension such that pki nss-cert commands
can generate requests and certificates with this extension.

- - - - -
b88185e7 by Endi S. Dewata at 2021-01-06T17:43:26-06:00
Add support for ocspResponder extended key usage in pki nss-cert

- - - - -
924d2d04 by Endi S. Dewata at 2021-01-06T17:43:35-06:00
Add --serial parameter for pki nss-cert-issue

The pki nss-cert-issue has been modified to provide an
optional parameter to specify a serial number for the
new certificate.

- - - - -
a0883837 by Endi S. Dewata at 2021-01-06T17:43:45-06:00
Add cert extension configs for CA certs

- - - - -
ea3c907c by Endi S. Dewata at 2021-01-06T17:43:55-06:00
Add test for installing CA with existing certs

- - - - -
c2b22676 by Endi S. Dewata at 2021-01-06T17:45:12-06:00
Clean up CI tests

- - - - -
b0298def by Endi S. Dewata at 2021-01-06T17:45:48-06:00
Fix python3-pki dependency

The python3-pki package has been modified to depend on
python3-ldap since it is needed by pki Python module.

- - - - -
d75d0152 by Endi S. Dewata at 2021-01-06T17:47:37-06:00
Disable ipa-healtcheck test

The ipa-healthcheck has been failing due to this issue:
https://github.com/freeipa/freeipa-healthcheck/issues/163

The ipa-healthcheck test has temporarily been disabled to
allow other IPA tests to pass.

- - - - -
a20ba28d by Endi S. Dewata at 2021-01-06T17:47:48-06:00
Clean up ipa-tests.yml

- - - - -
c9d46c06 by Endi S. Dewata at 2021-01-06T17:48:14-06:00
Fix issuing CA configuration during installation

The configuration.py has been modified to store the issuing CA
parameters in all cases except when installing CA with external
certs and standalone KRA/OCSP. This is necessary to fix KRA
installation with external certs.

- - - - -
1f70a0ac by Endi S. Dewata at 2021-01-06T17:49:44-06:00
Add support for emailProtection extended key usage in pki nss-cert

- - - - -
57c5318f by Endi S. Dewata at 2021-01-06T17:49:55-06:00
Add cert extension configs for KRA certs

- - - - -
4382948e by Endi S. Dewata at 2021-01-06T17:50:03-06:00
Add test for installing KRA with external certs

- - - - -
0459b00d by Endi S. Dewata at 2021-01-06T17:50:13-06:00
Add test for installing IPA clone

- - - - -
49207adf by Endi S. Dewata at 2021-01-06T17:50:33-06:00
Fix preop.ca.pkcs7 for external and standalone installations

- - - - -
337d8a95 by Endi S. Dewata at 2021-01-06T17:50:53-06:00
Disable GPG check in CI

The GPG check has been disabled due to the following issue
during build dependency installation on F32:

Package libuv-1.40.0-1.fc32.x86_64.rpm is not signed
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED

- - - - -
387f9968 by Endi S. Dewata at 2021-01-06T18:18:08-06:00
Fix KRA/OCSP installation with external certs on HSM

Previously pkispawn did not update serverCertNick.conf during
KRA or OCSP installation with external certs or standalone
installation. If the SSL server cert was stored in HSM the file
would not have the token name so the installation would fail.

To fix the problem the deployment scriptlet has been modified
to store the SSL server cert nickname and token name in
serverCertNick.conf in all installation cases.

https://bugzilla.redhat.com/show_bug.cgi?id=1890639

- - - - -
da395ab9 by Endi S. Dewata at 2021-01-06T21:40:29-06:00
Fix COPR repository for PKI 10.10

- - - - -
ef8ee5f9 by Alexander Scheel at 2021-01-11T11:37:21-05:00
Update usage for CRMFPopClient -y option

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
62ebb702 by Alexander Scheel at 2021-01-11T11:37:21-05:00
Fix usage for CMCResponse -d

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
567aa651 by Endi S. Dewata at 2021-01-13T14:13:12-06:00
Clean up CA clone test

- - - - -
062df9fb by Endi S. Dewata at 2021-01-13T14:15:04-06:00
Add HSM support for pki nss-cert-request

- - - - -
fd3e0d8e by Endi S. Dewata at 2021-01-13T14:15:04-06:00
Add HSM support for pki nss-cert-issue

- - - - -
8e39e0eb by Endi S. Dewata at 2021-01-13T14:15:04-06:00
Add HSM support for pki nss-cert-import

- - - - -
155ac655 by Endi S. Dewata at 2021-01-13T14:15:04-06:00
Add test for PKI NSS CLI with and without HSM

- - - - -
2cbf6715 by Endi S. Dewata at 2021-01-13T14:15:04-06:00
Add test for installing OCSP with external certs

- - - - -
3e81e61b by Endi S. Dewata at 2021-01-13T14:15:04-06:00
Add test for installing ACME

- - - - -
11156292 by Endi S. Dewata at 2021-01-13T14:15:04-06:00
Add test for installing KRA clone

- - - - -
0d6b3207 by Endi S. Dewata at 2021-01-13T16:26:05-06:00
Fix COPR repository for PKI 10.10

- - - - -
ef0f79da by Endi S. Dewata at 2021-01-13T18:34:56-06:00
Clean up CA clone test

- - - - -
e05be3b8 by Endi S. Dewata at 2021-01-13T18:34:56-06:00
Clean up KRA clone test

- - - - -
895ab300 by Endi S. Dewata at 2021-01-13T18:34:56-06:00
Clean up IPA clone test

- - - - -
3005be0e by Endi S. Dewata at 2021-01-14T09:29:23-06:00
Update version number to 10.10.3

- - - - -
eff1d9cd by root at 2021-01-14T10:35:12-06:00
Modify PKI to use RSA-OAEP wrapping alg for RSA keys.

This first cut is a simple reworking any instances of
RSA wrapping in the code to use RSA-OAEP.

Code tested to work in software. Using an hsm, several
issues occur with respect to wrapping using AES sym keys
to wrap and unwrap RSA private keys.

This first attempt is to get the basic code out for review.
Subsequently, we can refine some of this code to allow things
to work better with the hardware hsm.

Make oeap configurable.

- - - - -
6e3ad876 by Alexander Scheel at 2021-01-14T10:35:12-06:00
Remove additional lines from CRMFPopClient usage

Resolves: rh-bz#1584550

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
3148d31c by Endi S. Dewata at 2021-01-19T14:50:23-06:00
Fix indentations in qe-tests.yml

- - - - -
81bdb81c by Endi S. Dewata at 2021-01-19T14:50:37-06:00
Update upload/download actions in qe-tests.yml

- - - - -
f4ce0d40 by Endi S. Dewata at 2021-01-19T18:17:10-06:00
Add persistent option for ACME nonces

Previously ACME nonces were stored in ACME database, which
could generate a lot of database traffic and might not work
well in clustered environment due to replication latency.

To address the performance issue, the ACME engine has been
modified to store the nonces in memory by default, and provide
an option to store the nonces in the database if necessary.

The replication latency issue should be addressed using other
mechanisms (e.g. using static base URL in ACME directory).

- - - - -
2315c0db by Endi S. Dewata at 2021-01-19T18:19:26-06:00
Consolidate CI runner container build

The GitHub workflows have been modified to build the CI runner
container in the build job instead of test jobs.

- - - - -
40dab393 by Endi S. Dewata at 2021-01-25T16:24:10-06:00
Add pki-server acme-deploy/undeploy --wait option

A new option has been added to pki-server acme-deploy/undeploy
commands to wait until ACME web application is actually
deployed/undeployed on the server. This option can be used to
prevent the subsequent command from executing before the ACME
deployment/undeployment is complete. The CI test has been updated
to use this option to improve its reliability.

- - - - -
966d7d38 by Endi S. Dewata at 2021-01-25T16:24:24-06:00
Add ACME test using certbot

The ACME test has been modified to perform certificate enrollment,
certificate revocation, and account management using certbot.

- - - - -
36d13fd6 by Endi S. Dewata at 2021-01-25T16:24:36-06:00
Clean up IPA test

The code that installs and uninstalls IPA server has been
moved from ipa-test.sh to ipa-tests.yml.

- - - - -
76fbee50 by Endi S. Dewata at 2021-01-25T16:58:51-06:00
Fix security domain tools

The pki-server sd-* commands have been moved into
pki-server <ca/kra/ocsp>-* such that it can be used to
create the security domain properly in CA, KRA, and OCSP.

- - - - -
7d513eb4 by Endi S. Dewata at 2021-01-25T16:58:51-06:00
Fix PKIDeployer.setup_admin()

The PKIDeployer.setup_admin() has been modified to use
the proper admin groups for CA, KRA, and OCSP.

- - - - -
07d5ec92 by Endi S. Dewata at 2021-01-25T16:58:51-06:00
Add test for standalone KRA

- - - - -
15f051b3 by Endi S. Dewata at 2021-01-25T16:58:51-06:00
Add test for standalone OCSP

- - - - -
8b769282 by Endi S. Dewata at 2021-01-26T15:43:22-06:00
Fix profile auth in PKIIssuer.issueCertificate()

In commit 1b6b426ad4724e2f9595340027482a0a36fc3655 the
PKIClient.login() was removed from PKIIssuer.issueCertificate()
and that caused enrollments with a profile that requires
authentication to fail.

To fix the problem the PKIClient.login() has been restored.

https://bugzilla.redhat.com/show_bug.cgi?id=1919282

- - - - -
1de07c22 by Endi S. Dewata at 2021-01-26T15:43:33-06:00
Add ACME tests for IPA

The IPA test has been modified to perform ACME tests
using certbot.

- - - - -
5f408602 by Endi S. Dewata at 2021-01-27T10:24:50-06:00
Update release number to 10.10.3-4

- - - - -
6fbbbf90 by Endi S. Dewata at 2021-01-29T15:57:56-06:00
Add test for installing TKS clone

- - - - -
22897930 by Endi S. Dewata at 2021-01-29T18:00:58-06:00
Fix COPR repo for TKS test

- - - - -
c61c5ee6 by Endi S. Dewata at 2021-01-29T18:00:58-06:00
Fix clone of clone installation

In commit e0b249636e2ea24d3d0633e65bf1d6e0a3dbd35f the
CMSEngine.configurePorts() invocation was moved later
during server startup process. It's not clear how, but
apparently the cert number range assignment depends on
this code so it failed when installing a clone of an
existing clone.

To fix the problem the invocation has been moved back
into its original position.

Resolves: https://github.com/dogtagpki/pki/issues/3330

- - - - -
02a375de by Endi S. Dewata at 2021-01-29T18:00:58-06:00
Add test for installing CA clone of clone

- - - - -
bd83211d by Endi S. Dewata at 2021-01-29T18:00:58-06:00
Add test for installing KRA clone of clone

- - - - -
f86773ab by Endi S. Dewata at 2021-01-29T20:47:21-06:00
Clean up CA test

- - - - -
705aa5e8 by Endi S. Dewata at 2021-01-29T20:47:21-06:00
Clean up KRA test

- - - - -
9900c46d by Endi S. Dewata at 2021-02-01T11:55:06-06:00
Add ACME base URL parameter

By default the ACME directory will return ACME service URLs
with the same hostname that the client uses to access the
directory. If the hostname is load-balanced, the client might
get redirected to different servers, which could trigger other
issues.

A new parameter has been added into engine.conf to override
the base URL of ACME services. This mechanism can be used to
pin the client to the current server.

- - - - -
a52e4b5c by Endi S. Dewata at 2021-02-01T11:55:06-06:00
Add ACME server switchover test

- - - - -
514741c2 by Endi S. Dewata at 2021-02-01T16:17:50-06:00
Fixed error handling during replica setup

Originally the LDAPConfigurator.createReplicaObject() would
return true if it managed to add a new replica object. If the
object already existed, it would only add the new replica bind
DN and return false. If an error happened it would get ignored
and the method would return false as well.

In 4abfdc77508545fb90ef127fbbf373ae1609d705 the behavior of
accidentally got changed return true if the replica object
already exists and this caused OCSP and TKS clone of clone
installation to fail.

To fix the problem the behavior has been reverted except that
now any error will be reported as an exception.

https://bugzilla.redhat.com/show_bug.cgi?id=1912418

- - - - -
59879874 by Endi S. Dewata at 2021-02-01T16:21:35-06:00
Add test for installing OCSP clone

- - - - -
09177132 by Endi S. Dewata at 2021-02-01T16:21:35-06:00
Add test for installing OCSP clone of clone

- - - - -
6d7aa2b3 by Endi S. Dewata at 2021-02-01T16:21:35-06:00
Add test for installing TKS clone of clone

- - - - -
0b5620b6 by Endi S. Dewata at 2021-02-01T16:21:35-06:00
Fix COPR repo for ACME test

- - - - -
8913e315 by Endi S. Dewata at 2021-02-01T18:29:55-06:00
Update CA clone doc

- - - - -
0fc92476 by Endi S. Dewata at 2021-02-01T18:30:03-06:00
Update KRA clone doc

- - - - -
5ec94e61 by Endi S. Dewata at 2021-02-04T17:31:01-06:00
Add pki <subsystem>-range-request --install-token option

- - - - -
26b29c38 by Endi S. Dewata at 2021-02-04T17:31:18-06:00
Add pki <subsystem>-config-export --install-token option

- - - - -
877751b9 by Endi S. Dewata at 2021-02-04T17:33:32-06:00
Add pki securitydomain-join --install-token option

- - - - -
91f25b90 by Endi S. Dewata at 2021-02-04T17:34:42-06:00
Fix calculation in test_cert_enrollment.py

The test_cert_enrollment.py has been modified to use float
instead of int when calculating the elapsed time for better
accuracy.

- - - - -
c57a0391 by Endi S. Dewata at 2021-02-04T17:34:43-06:00
Add default values for test_cert_enrollment.py parameters

Some parameters for test_cert_enrollment.py have been modified
to provide a default value to make it easier to use.

- - - - -
507af7bd by Endi S. Dewata at 2021-02-04T17:34:43-06:00
Update log messages in test_cert_enrollment.py

The test_cert_enrollment.py has been modified to provide
a --verbose and a --debug options to show the test progress
and some debugging information.

- - - - -
5bad7101 by Endi S. Dewata at 2021-02-04T17:34:43-06:00
Fix calculation in test_acme_cert_enrollment.py

The test_acme_cert_enrollment.py has been modified to use
float instead of int when calculating the elapsed time for
better accuracy.

- - - - -
0475ff1b by Endi S. Dewata at 2021-02-04T17:34:43-06:00
Add default values for test_acme_cert_enrollment.py parameters

The parameters for test_acme_cert_enrollment.py have been
modified to provide a default value to make it easier to use.

- - - - -
8d2835c6 by Endi S. Dewata at 2021-02-04T17:34:43-06:00
Update log messages in test_acme_cert_enrollment.py

The test_acme_cert_enrollment.py has been modified to provide
a --verbose and a --debug options to show the test progress and
some debugging information.

- - - - -
a3fa35e3 by Endi S. Dewata at 2021-02-04T17:34:43-06:00
Add performance tests scripts into pki-tests

- - - - -
beb615b7 by Endi S. Dewata at 2021-02-04T17:34:43-06:00
Add doc for CA performance test

- - - - -
a72d8d14 by Endi S. Dewata at 2021-02-04T17:34:43-06:00
Add doc for ACME performance test

- - - - -
a88a97ba by Endi S. Dewata at 2021-02-04T17:35:06-06:00
Fix TPS clone installation

The TPS clone installation has been fixed by adding
the GetConfigEntries servlet into TPS's web.xml.

Resolves: https://github.com/dogtagpki/pki/issues/1841

- - - - -
7ee9c435 by Endi S. Dewata at 2021-02-04T17:35:14-06:00
Add test for installing TPS clone

- - - - -
b2cec1cb by Endi S. Dewata at 2021-02-08T13:03:11-06:00
Update version number to 10.10.4

- - - - -
042e2b70 by Endi S. Dewata at 2021-02-08T14:13:53-06:00
Move FixChallengePasswordClassPath.py

The FixChallengePasswordClassPath.py upgrade script has
been moved into base/server/upgrade/10.10.4 folder.

https://bugzilla.redhat.com/show_bug.cgi?id=1664435

- - - - -
2856e5a7 by Endi S. Dewata at 2021-02-08T14:13:53-06:00
Fix PKIClient usage in PKIIssuer

The PKIIssuer has been modified to close PKIClient objects
explicitly using try-with-resources to avoid excessive open
connections.

https://bugzilla.redhat.com/show_bug.cgi?id=1916686

- - - - -
6ee1f01d by Endi S. Dewata at 2021-02-08T14:13:53-06:00
Add SessionAuthentication for acmeServerCert

The acmeServerCert profile has been modified to use
SessionAuthentication instead of manual agent approval
to improve ACME cert enrollment performance.

https://bugzilla.redhat.com/show_bug.cgi?id=1916686

- - - - -
1a8de83c by Endi S. Dewata at 2021-02-08T14:13:53-06:00
Add ACME indexes for DS

Currently ACME indexes are defined in the CA's index.ldif so
when the CA is created the ACME indexes will be created as
well in the same DS backend. However, if later the ACME is
installed on a different DS backend, the ACME indexes need to
be created in that backend instead.

To simplify the installation process a new index.ldif has been
added to define the ACME indexes for DS. A new indextask.ldif
has been added as well to reindex an existing database.

In the future the ACME indexes may be removed from the CA's
index.ldif.

https://bugzilla.redhat.com/show_bug.cgi?id=1916686

- - - - -
c10d9655 by Alexander Scheel at 2021-02-08T14:13:53-06:00
Add RSA-OAEP support to SecurityDataProcessor

org.mozilla.jss.netscape.security.util.WrappingParams in JSS has an
shortcoming that it believes all RSA is RSA-PKCS1v1.5 and additionally,
that anything that isn't a EC key is RSA. :-)

Read the value of keyWrap.useOAEP to determine whether to override the
secret key wrapping algorithm with OAEP, prior to using and storing the
wrapping parameters.

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
25e0dc00 by Alexander Scheel at 2021-02-08T14:13:53-06:00
Make CryptoUtil respect FIPS Status

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
7ae88d5b by Alexander Scheel at 2021-02-08T14:13:53-06:00
Add OAEP support to pki client-cert-request

Signed-off-by: Alexander Scheel <ascheel at redhat.com>

- - - - -
22ab633b by Endi S. Dewata at 2021-02-11T19:32:08-06:00
Clean up tools tests

- - - - -
a01d3bad by Endi S. Dewata at 2021-02-16T12:30:19-06:00
Fix exception message in PKIServer.webapp_undeploy()

- - - - -
a36739ac by Endi S. Dewata at 2021-02-16T12:30:35-06:00
Add pki <subsystem>-deploy/undeploy

The ACMEDeployCLI and ACMEUndeployCLI have been converted
into generic SubsystemDeployCLI and SubsystemUndeployCLI
that can be used by all subsystems.

- - - - -
19326ddd by Endi S. Dewata at 2021-02-17T13:07:52-06:00
Add test for tpsclient

The TPS test has been modified to verify token format and
token enrollment operations using tpsclient.

- - - - -
758b6488 by Endi S. Dewata at 2021-02-18T12:54:44-06:00
Add --no-ntp in IPA tests

NTP is not necessary for testing IPA in containers
so it has been disabled.

- - - - -
bea5ea36 by Endi S. Dewata at 2021-02-18T13:52:11-06:00
Fix COPR repo for TPS cloning test

- - - - -
16e6338a by Christina Fu at 2021-02-22T14:00:57-08:00
userOAEP erronously enabled in ServerKeygenUserKeyDefault.java

This patch fixes an error in ServerKeygenUserKeyDefault.java where
userOAEP is erronously enabled regardless of the CS.cfg config setting
for keyWrap.useOAEP

- - - - -
21735b42 by jmagne at 2021-02-22T14:16:12-08:00
pkispawn fails against 389-ds 1.4.3.19 #3458 (#3465)

Add suggested patch from stanislavlevin to solve this issue.
Also add f34 to the ipa tests,this time really add the tests.
Upon further review, back out of f34 tests until the infractructure
supports it.

Also hardcode tomcat app setting in spec file for the moment to
avoid possible glitches on certain platform.

Co-authored-by: Jack Magne <jmagne at localhost.localdomain>
- - - - -
445b3816 by dependabot[bot] at 2021-02-23T09:11:29-06:00
Bump jackson-databind from 2.10.1 to 2.10.5.1

Bumps [jackson-databind](https://github.com/FasterXML/jackson) from 2.10.1 to 2.10.5.1.
- [Release notes](https://github.com/FasterXML/jackson/releases)
- [Commits](https://github.com/FasterXML/jackson/commits)

Signed-off-by: dependabot[bot] <support at github.com>
- - - - -
d9e8b3ed by Endi S. Dewata at 2021-02-23T09:11:29-06:00
Update doc for installing PostgreSQL JDBC driver

- - - - -
5b5ddd5d by Endi S. Dewata at 2021-02-23T09:15:40-06:00
Update version number to 10.10.5

- - - - -


8 changed files:

- + .github/workflows/acme-tests.yml
- .github/workflows/ca-tests.yml
- .github/workflows/ipa-tests.yml
- .github/workflows/kra-tests.yml
- .github/workflows/ocsp-tests.yml
- .github/workflows/python-tests.yml
- .github/workflows/qe-tests.yml
- .github/workflows/tks-tests.yml


The diff was not included because it is too large.


View it on GitLab: https://salsa.debian.org/freeipa-team/dogtag-pki/-/compare/45754068a5c44a6045f1ceea3cfef5fc9db39a01...5b5ddd5d736fd719cc94a159af392fff91a734c7

-- 
View it on GitLab: https://salsa.debian.org/freeipa-team/dogtag-pki/-/compare/45754068a5c44a6045f1ceea3cfef5fc9db39a01...5b5ddd5d736fd719cc94a159af392fff91a734c7
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-freeipa-devel/attachments/20210305/c29fe976/attachment-0001.htm>

More information about the Pkg-freeipa-devel mailing list