freeipa.git - FreeIPA project

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Clean up some problems discovered with pylint and pychecker	Rob Crittenden	2009-08-12	1	-5/+1
\| \| \| \| \|	Much of this is formatting to make pylint happy but it also fixes some real bugs.
*	Allow replicas of an IPA server using an internal dogtag server as the CA	Rob Crittenden	2009-07-15	1	-82/+120
\| \| \| \| \| \| \| \|	This involves creating a new CA instance on the replica and using pkisilent to create a clone of the master CA. Also generally fixes IPA to work with the latest dogtag SVN tip. A lot of changes to ports and configuration have been done recently.
*	Drop the binary subtype. This usage is deprecated according to Rich M.	Rob Crittenden	2009-05-13	1	-1/+1
\|
*	Utilize the new dogtag library for retrieving the CA cert chain	Rob Crittenden	2009-05-04	1	-15/+4
\|
*	Add signing profile to CA installation so we can sign the firefox jar file.	Rob Crittenden	2009-05-04	1	-7/+33
\| \| \| \| \| \| \|	Use the requestId we get back from the CA when requesting the RA agent cert and use that to issue the certificate rather than hardcoding 7. This also adds some clean-up of file permissions and leaking fds
*	Issue DS and Apache server certs during CA installation.	Rob Crittenden	2009-04-20	1	-39/+89
\| \| \| \| \| \| \|	Notes: - will create a CA instance (pki-ca) if it doesn't exist - maintains support for a self-signed CA - A signing cert is still not created so Firefox autoconfig still won't work
*	Implement an installer for the Dogtag certificate system.	Rob Crittenden	2009-04-03	1	-0/+743
	The CA is currently not automatically installed. You have to pass in the --ca flag to install it. What works: - installation - unistallation - cert/ra plugins can issue and retrieve server certs What doesn't work: - self-signed CA is still created and issues Apache and DS certs - dogtag and python-nss not in rpm requires - requires that CS be in the "pre" install state from pkicreate