URL: https://github.com/freeipa/freeipa/pull/3148
Author: tiran
Title: #3148: Decouple integration tests from ipaserver package
Action: opened
PR body:
"""
The integration test suite has weak dependencies on ipaserver. This PR replaces the few imports with copied constants and decouples integration tests from the server package.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3148/head:pr3148
git checkout pr3148
URL: https://github.com/freeipa/freeipa/pull/3137
Author: abbra
Title: #3137: Azure pipelines setup
Action: opened
PR body:
"""
Sets up a pipeline to run FreeIPA build and tests in Azure Pipelines.
Azure Pipelines provides 10 parallel free runners for open source projects.
Use them to run following jobs:
- Build: build RPMs and Fedora 30 container with them
- Lint: run linting of the source code
- Tox: run py36,pypi,pylint tests using Tox
- Web UI unit tests: run Web UI unit tests with Grunt/QUnit/PhantomJS
- XMLRPC tests: install FreeIPA server and run XMLRPC tests against it
All jobs are running in Fedora 30 containers. Build, Lint, Tox, and Web UI unit tests run inside f30/fedora-toolbox container. Build job generates a container with pre-installed FreeIPA packages using official fedora:30 container. All containers are picked up from the registry.fedoraproject.org.
Artifacts from the build job are pushed to a pipeline storage and reused in the XMLRPC tests. They also are accessible in the 'Summary' tab to download.
XUnit and QUnit outputs from the tests that produce it are reported in the 'Tests' tab.
Logs from individual steps from each job are available for review in the 'Logs' tab. They also can be downloaded.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3137/head:pr3137
git checkout pr3137
URL: https://github.com/freeipa/freeipa/pull/3145
Author: rcritten
Title: #3145: Use AES-128-CBC for PKCS#12 encryption when creating files (FIPS)
Action: opened
PR body:
"""
A PKCS#12 file is generated from a set of input files in various
formats. This file is then used to provide the public and private
keys and certificate chain fro importing into an NSS database.
In order to work in FIPS mode stronger encryption is required.
The default OpenSSL certificate algo is 40-bit RC2 which is not
allowed in FIPS mode. The default private key algo is 3DES.
Use AES-128 instead for both.
Fixes: https://pagure.io/freeipa/issue/7948
Signed-off-by: Rob Crittenden <rcritten(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3145/head:pr3145
git checkout pr3145
URL: https://github.com/freeipa/freeipa/pull/3140
Author: tiran
Title: #3140: Use PKCS#8 instead of traditional privkey format
Action: opened
PR body:
"""
The modern PKCS#8 private key format supports better encryption standard
and is preferable over traditional, weak PKCS#1 key format.
Fixes: https://pagure.io/freeipa/issue/7943
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3140/head:pr3140
git checkout pr3140
URL: https://github.com/freeipa/freeipa/pull/3141
Author: stanislavlevin
Title: #3141: Fix `build_requestinfo` in LibreSSL environments
Action: opened
PR body:
"""
`build_requestinfo` was broken in @ac6568dcf.
In this case LibreSSL behavior is the same as OpenSSL < 1.1.x.
Thus, an additional check for SSL implementation was added.
Fixes: https://pagure.io/freeipa/issue/7937
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3141/head:pr3141
git checkout pr3141
URL: https://github.com/freeipa/freeipa/pull/3139
Author: tiran
Title: #3139: Load libldap_r-*.so.2
Action: opened
PR body:
"""
libldap_r.so is only available in the OpenLDAP development packages. The
openldap package provides libldap_r-*.so.2.
Fixes: https://pagure.io/freeipa/issue/7941
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/3139/head:pr3139
git checkout pr3139