Ken Dreyer

switch to SSLCertificateFile [el8 only]

1

Apache 2.4.8+ loads all intermediate CA certificates from `SSLCertificateFile`, and the `SSLCertificateChainFile` directive is [obsolete](https://httpd.apache.org/docs/current/mod/mod_ssl.html#sslcertificatechainfile). CentOS 7 has httpd-2.4.6 CentOS 8 has httpd-2.4.37 We can delete `SSLCertificateChainFile` from the [server...

remove the hack for bz1661580 once python-requests-gssapi lands for el7

1

Use this set of playbooks in order to test landing the python-requests-gssapi change at https://pagure.io/koji/pull-request/2280 This should allow us to remove the references to https://fedorapeople.org/~ktdreyer/bz1661580/ .

Let's enable this: https://stickler-ci.com/docs#ansible

support SSL authentication

1

It would be nice to support SSL certificate authentication in addition to Kerberos authentication. We could add a `koji_auth` variable to each Koji role. This variable would be "kerberos" by...

docs: improve pyopenssl docs in deploy.rst

2

Update the docs to say that `builtin` is now the default backend. Give Python examples of how to set both backends (`builtin` and `pyopenssl`.) **What kind of change does this...

collections.MutableMapping is not available in Python 3.10

7

`collections.MutableMapping` is deprecated in Python 3.3: ```DeprecationWarning: Using or importing the ABCs from 'collections' instead of from 'collections.abc' is deprecated since Python 3.3, and in 3.10 it will stop working```...

support SSL client auth in stompest.async

5

I'm attempting to authenticate to STOMP on ActiveMQ that requires SSL clients to present a x509 keypair in order to connect. For the stompest sync client, it is really simple,...

I'm writing a transaction context manager (similar to https://github.com/eugene-eeo/tinyrecord) that can potentially replace the underlying `db.json` file with a newer one (from a Git repo). The docs state: > To...

RFE: provide manylinux binary wheel package

5

(This is an RFE, not a bug report.) `pip install requests-gssapi` pulls in `gssapi`, and `gssapi` depends on several development libraries being available. On Fedora and RHEL, it requires `gcc`,...