freeipa.git/install/tools/man, branch views

Make CA-less ipa-server-install option --root-ca-file optional.

2014-09-05T11:59:04+00:00

The CA cert specified by --root-ca-file option must always be the CA cert of
the CA which issued the server certificates in the PKCS#12 files. As the cert
is not actually user selectable, use CA cert from the PKCS#12 files by default
if it is present.

Document --root-ca-file in ipa-server-install man page.

https://fedorahosted.org/freeipa/ticket/4457

Reviewed-By: Petr Viktorin

Allow changing CA renewal master in ipa-csreplica-manage.

2014-09-02T13:28:51+00:00

https://fedorahosted.org/freeipa/ticket/4039

Reviewed-By: Petr Viktorin

Add man page for ipa-kra-install

2014-08-26T13:21:21+00:00

https://fedorahosted.org/freeipa/ticket/4504

Reviewed-By: Petr Viktorin

Convert external CA chain to PKCS#7 before passing it to pkispawn.

2014-08-14T08:06:27+00:00

https://fedorahosted.org/freeipa/ticket/4397

Reviewed-By: Petr Viktorin

Allow upgrading CA-less to CA-full using ipa-ca-install.

2014-07-30T14:04:21+00:00

Part of https://fedorahosted.org/freeipa/ticket/3737

Reviewed-By: Rob Crittenden

Allow adding CA certificates to certificate store in ipa-cacert-manage.

2014-07-30T14:04:21+00:00

Part of https://fedorahosted.org/freeipa/ticket/3737

Reviewed-By: Rob Crittenden

Allow changing chaining of the IPA CA certificate in ipa-cacert-manage.

2014-07-30T14:04:21+00:00

Part of https://fedorahosted.org/freeipa/ticket/3737

Reviewed-By: Rob Crittenden

Add CA certificate management tool ipa-cacert-manage.

2014-07-30T14:04:21+00:00

Part of https://fedorahosted.org/freeipa/ticket/3737

Reviewed-By: Rob Crittenden

Implement OTP token importing

2014-06-25T10:55:02+00:00

This patch adds support for importing tokens using RFC 6030 key container
files. This includes decryption support. For sysadmin sanity, any tokens
which fail to add will be written to the output file for examination. The
main use case here is where a small subset of a large set of tokens fails
to validate or add. Using the output file, the sysadmin can attempt to
recover these specific tokens.

This code is implemented as a server-side script. However, it doesn't
actually need to run on the server. This was done because importing is an
odd fit for the IPA command framework:
1. We need to write an output file.
2. The operation may be long-running (thousands of tokens).
3. Only admins need to perform this task and it only happens infrequently.

https://fedorahosted.org/freeipa/ticket/4261

Reviewed-By: Alexander Bokovoy

Fixed typo in ipa-replica-manage man page

2014-05-12T16:43:07+00:00

Reviewed-By: Nathaniel McCallum