From 1a5159b216455070eb51b6a11ceaf0033fc8ce4c Mon Sep 17 00:00:00 2001

From: Alexander Bokovoy <abokovoy@redhat.com>

Date: Fri, 16 Jul 2021 09:20:33 +0300

Subject: [PATCH] rhel platform: add a named crypto-policy support

RHEL 8+ provides bind system-wide crypto policy support, enable it.

Fixes: https://pagure.io/freeipa/issue/8925

Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>

Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>

Reviewed-By: Anuja More <amore@redhat.com>

---

 ipaplatform/rhel/paths.py | 1 +

 1 file changed, 1 insertion(+)

diff --git a/ipaplatform/rhel/paths.py b/ipaplatform/rhel/paths.py

index c081ada32..3631550eb 100644

--- a/ipaplatform/rhel/paths.py

+++ b/ipaplatform/rhel/paths.py

@@ -30,6 +30,7 @@ from ipaplatform.rhel.constants import HAS_NFS_CONF

 class RHELPathNamespace(RedHatPathNamespace):

+    NAMED_CRYPTO_POLICY_FILE = "/etc/crypto-policies/back-ends/bind.config"

     if HAS_NFS_CONF:

         SYSCONFIG_NFS = '/etc/nfs.conf'

-- 

2.31.1