summaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Refactor CA certificate fetching code in ipa-client-install.Jan Cholasta2014-07-301-51/+37
* Upload renewed CA cert to certificate store on renewal.Jan Cholasta2014-07-301-7/+2
* Import CA certs from certificate store to HTTP NSS database on server install.Jan Cholasta2014-07-301-0/+5
* Import CA certs from certificate store to DS NSS database on replica install.Jan Cholasta2014-07-302-1/+29
* Add new add_cert method for adding certificates to NSSDatabase and CertDB.Jan Cholasta2014-07-302-15/+13
* Rename CertDB method add_cert to import_cert.Jan Cholasta2014-07-301-3/+3
* Upload CA chain from DS NSS database to certificate store on server update.Jan Cholasta2014-07-301-16/+52
* Upload CA chain from DS NSS database to certificate store on server install.Jan Cholasta2014-07-301-19/+17
* Add certificate store module ipalib.certstore.Jan Cholasta2014-07-301-0/+397
* Add function for extracting extended key usage from certs to ipalib.x509.Jan Cholasta2014-07-301-0/+22
* Add functions for extracting certificates fields in DER to ipalib.x509.Jan Cholasta2014-07-301-0/+55
* Add permissions for certificate store.Jan Cholasta2014-07-304-0/+89
* Configure attribute uniqueness for certificate store.Jan Cholasta2014-07-301-0/+34
* Add container for certificate store.Jan Cholasta2014-07-303-0/+11
* Add LDAP schema for certificate store.Jan Cholasta2014-07-304-0/+11
* Add LDAP schema for wrapped cryptographic keys.Jan Cholasta2014-07-301-0/+7
* Fix trust flags in HTTP and DS NSS databases.Jan Cholasta2014-07-305-17/+54
* Allow specifying trust flags in NSSDatabase and CertDB method trust_root_cert.Jan Cholasta2014-07-301-4/+6
* Remove certificate "External CA cert" from /etc/pki/nssdb on client uninstall.Jan Cholasta2014-07-301-3/+7
* Do not treat the IPA RA cert as CA cert in DS NSS database.Jan Cholasta2014-07-302-10/+27
* Allow IPA master hosts to read and update IPA master information.Jan Cholasta2014-07-302-0/+42
* Check that renewed certificates coming from LDAP are actually renewed.Jan Cholasta2014-07-301-6/+32
* Do not use ldapi in certificate renewal scripts.Jan Cholasta2014-07-304-82/+107
* Remove master ACIs when deleting a replica.Jan Cholasta2014-07-301-0/+43
* Pick new CA renewal master when deleting a replica.Jan Cholasta2014-07-302-3/+20
* Load sysupgrade.state on demand.Jan Cholasta2014-07-301-1/+9
* Alert user when externally signed CA is about to expire.Jan Cholasta2014-07-301-1/+6
* Add CA certificate management tool ipa-cacert-manage.Jan Cholasta2014-07-306-2/+376
* Add permissions for CA certificate renewal.Jan Cholasta2014-07-302-0/+27
* Add method for verifying CA certificates to NSSDatabase.Jan Cholasta2014-07-301-0/+23
* Move external cert validation from ipa-server-install to installutils.Jan Cholasta2014-07-302-42/+53
* Provide additional functions to ipapython.certmonger.Jan Cholasta2014-07-301-0/+28
* Add method for setting CA renewal master in LDAP to CAInstance.Jan Cholasta2014-07-301-3/+38
* Track CA certificate using dogtag-ipa-ca-renew-agent.Jan Cholasta2014-07-302-9/+30
* Automatically update CA certificate in LDAP on renewal.Jan Cholasta2014-07-301-0/+28
* Allow IPA master hosts to update CA certificate in LDAP.Jan Cholasta2014-07-301-0/+2
* Support CA certificate renewal in dogtag-ipa-ca-renew-agent.Jan Cholasta2014-07-301-2/+47
* Add function for checking if certificate is self-signed to ipalib.x509.Jan Cholasta2014-07-301-0/+6
* test_ipagetkeytab: Fix assertion in negative testPetr Viktorin2014-07-301-4/+2
* Do not crash client basedn discovery when SSF not metMartin Kosek2014-07-291-4/+4
* Verify otptoken timespan is validDavid Kupka2014-07-291-1/+30
* test group: remove group from protected group.David Kupka2014-07-291-0/+67
* Fix group-remove-member crash when group is removed from a protected groupDavid Kupka2014-07-291-1/+1
* Exclude attributelevelrights from --raw result processing in baseldap.Jan Cholasta2014-07-291-3/+7
* Check if /root/ipa.csr exists when installing server with external CA.Jan Cholasta2014-07-281-2/+14
* FIX: named_enable_dnssec should verify if DNS is installedMartin Basti2014-07-281-0/+5
* Fix DNS upgrade plugin should check if DNS container existsMartin Basti2014-07-281-0/+4
* Update API.txtPetr Viktorin2014-07-281-2/+2
* ipalib: idrange: Make non-implemented range types fail the validationTomas Babej2014-07-281-2/+3
* webui: add bounce url to reset_password.htmlPetr Vobornik2014-07-281-0/+24