The KRA client currently uses python-nss to do various crypto operations including generating session keys, encrypting/decrypting the data, and wrapping/unwrapping keys. Due to maintenance issue the python-nss should be replaced with python-cryptography.
Further investigation is needed to determine if python-cryptography has the necessary key wrapping functionality.
simo says:
It depends on the key wrapping, I have coded in python (jwcrypto) support for some key wrapping not yet available in python-cryptography and can lend you the code as needed.
Proposed milestone: 10.3
Per CS/DS meeting of 06/08/2015: 10.3
Metadata Update from @edewata: - Issue set to the milestone: UNTRIAGED
Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.
This issue has been cloned to GitHub and is available here: https://github.com/dogtagpki/pki/issues/1961
If you want to receive further updates on the issue, please navigate to the GitHub issue and click on Subscribe button.
Subscribe
Thank you for understanding, and we apologize for any inconvenience.
Metadata Update from @dmoluguw: - Issue close_status updated to: migrated - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.