Upstream release 4.12.2
Release notes: https://www.freeipa.org/release-notes/4-12-2.html
Fix CA uninstall in case ACME instance is available
Bump SSSD requirement to 2.9.5 to ensure sssd-idp can handle Entra ID

Upstream release 4.12.1
Release notes: https://www.freeipa.org/release-notes/4-12-1.html
Security release: CVE-2024-2698 CVE-2024-3183

Upstream release 4.12
Release notes: https://www.freeipa.org/release-notes/4-12-0.html

Security release: CVE-2024-1481
Resolves: rhbz#2265129

Security release: CVE-2023-5455
Resolves: rhbz#2257646

ipalib: fix the IPACertificate validity dates (python 3.12 compatibility)
Handle PKI revocation response differences in JSON API
Allow removal of minimal length from a custom password policy

Adopt trust to AD code to Samba changes in case SIDs are malformed

FreeIPA 4.11.0 release
Simplify Fedora spec file
Release notes: https://www.freeipa.org/release-notes/4-11-0.html

Depend on selinux-policy-38.28-1.fc39
Add SELinux policy for passkey_child to be used without ipa-otpd
Related: rhbz#2238474

Restore properly SELinux context during IPA client uninstallation
Related: rhbz#2238474

Set 'sssd_use_usb' SELinux boolean when enrolling IPA client
Resolves: rhbz#2238474

FreeIPA 4.11.0 beta 1
Release notes: https://www.freeipa.org/release-notes/4-11-0-beta.html

Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

Use ssl.match_hostname from urllib3 as it was removed from Python 3.12

Rebuilt for Python 3.12

Upstream release FreeIPA 4.10.2
Synchronize patches with CentOS 9 Stream