Disable cracklib check password

[fmarco76]

Cracklib based password check is temporarly disabled while the selinux policy is updated to allow its usage.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[edewata]

I'll defer to @ladycfu but to my understanding we're only removing it from the default profiles and the code still supports the cracklibCheck param, so we probably should keep the docs since it's an optional param.

I just noticed this, should it be checking CONFIG_PASSWORD_CRACKLIB_CHECK instead?
https://github.com/dogtagpki/pki/blob/master/base/ca/src/main/java/com/netscape/cms/profile/constraint/P12ExportPasswordConstraint.java#L165-L167

And it probably needs to be added here too:
https://github.com/dogtagpki/pki/blob/master/base/ca/src/main/java/com/netscape/cms/profile/constraint/P12ExportPasswordConstraint.java#L79-L85

[fmarco76]

And it probably needs to be added here too:
https://github.com/dogtagpki/pki/blob/master/base/ca/src/main/java/com/netscape/cms/profile/constraint/P12ExportPasswordConstraint.java#L79-L85

This check if numerical options are parsed correctly. Boolean parse all the string and match to true or false without generating error so there is no need to add in this method.

[fmarco76]

so we probably should keep the docs since it's an optional param.

Doc is not working if selinux is enabled.

[edewata]

Do we want to allow people to use cracklib with selinux disabled?

[ladycfu]

LGTM

[fmarco76]

Do we want to allow people to use cracklib with selinux disabled?
They can start testing with the available options and this will come later.

[fmarco76]

@edewata @ladycfu Thanks!