[Freeipa-devel] SSL

Simo Sorce ssorce at redhat.com
Tue Jul 10 21:29:29 UTC 2007


On Tue, 2007-07-10 at 17:11 -0400, Rob Crittenden wrote:
> So I was thinking about the XML-RPC portion of this.
> 
> One thing we'll be doing is setting and resetting user passwords. So we 
> should use SSL to protect them, if for no other reaosn.
> 
> So:
> 
> 1. I assume we'll have to use OpenSSL. If there are Python NSS bindings 
> I couldn't find them. OLPC may do this work for us 
> (http://dev.laptop.org/ticket/855)
> 
> 2. How will we manage trust between the gui and command-line clients and 
> XML-RPC server?

IF we are going to use kerberos, can't we just use GSSAPI to encrypt
traffic?

Simo.




More information about the Freeipa-devel mailing list