openstack
/
tripleo-quickstart-extras
Code Issues Proposed changes

Added comment to revert in a future 

The issue which was solved doesn't have a correct solution yet.
It might be tricky and it's not clear when solution will be
available.
IPA server does not work correctly under latest openssl.
Due to that, it's recommended to keep pinned version of
openssl to known working one.

Related-Bug: https://bugzilla.redhat.com/show_bug.cgi?id=2057471
Closes-Bug: 1963545
Change-Id: Ie037697098d53b8c1c49fa5e6679e244e92ac768
This commit is contained in:
Dariusz Smigiel 2022-03-16 08:19:59 -07:00 committed by dasm
parent 0c2be73411
commit f2379876d1
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/freeipa-setup/templates/deploy_freeipa.sh.j2
View File

@ -56,6 +56,8 @@ rpm -Uvh ius-release*.rpm
systemctl start haveged.service
## Downgrade openssl version
# TODO(dasm): unpin openssl once bug is fixed
# https://bugs.launchpad.net/tripleo/+bug/1963545/comments/4
{% if ansible_distribution_major_version is version("9", ">=") -%}
sudo dnf downgrade -y openssl-3.0.1-5.el9
{% endif %}