summaryrefslogtreecommitdiffstats
path: root/ipaserver/install/cainstance.py
Commit message (Expand)AuthorAgeFilesLines
* Re-arrange CA configuration code to reduce the number of restarts.Rob Crittenden2011-08-031-34/+14
* Clean up existing DN object usageJohn Dennis2011-07-291-4/+4
* Set nickname of the RA to 'IPA RA' to avoid confusion with dogtag RARob Crittenden2011-07-171-2/+2
* Use information from the certificate subject when setting the NSS nickname.Rob Crittenden2011-07-171-7/+10
* Fix self-signed replica installationMartin Kosek2011-07-141-2/+2
* Make dogtag an optional (and default un-) installed component in a replica.Rob Crittenden2011-06-231-1/+77
* Let the framework be able to override the hostname.Rob Crittenden2011-06-231-15/+14
* Make data type of certificates more obvious/predictable internally.Rob Crittenden2011-06-211-11/+3
* Fix external CA installationRob Crittenden2011-06-091-4/+5
* Let selinux-policy handle port 7390Martin Kosek2011-05-111-18/+0
* Wait for Directory Server ports to openMartin Kosek2011-03-211-12/+1
* Fix SELinux errors caused by enabling TLS on dogtag 389-ds instance.Rob Crittenden2011-03-151-15/+58
* Use TLS for dogtag replication agreements.Rob Crittenden2011-03-101-4/+52
* Set SuiteSpotGroup when setting up our 389-ds instances.Rob Crittenden2011-02-241-1/+3
* Fix installing with an external CA and wait for dogtag to come upRob Crittenden2011-02-011-0/+23
* Use a common group for all DS instancesSimo Sorce2011-01-311-30/+32
* fixes CA install problem in trac ticket 682John Dennis2011-01-051-18/+24
* Change FreeIPA license to GPLv3+Jakub Hrozek2010-12-201-5/+5
* Properly quote passwords sent to pkisilent so special characters work.Rob Crittenden2010-12-171-7/+7
* Fix Install using dogtag.Simo Sorce2010-12-101-2/+10
* Move Selfsigned CA creation out of dsinstanceSimo Sorce2010-12-101-5/+5
* Introduce ipa control script that reads configuration off ldapSimo Sorce2010-12-101-9/+5
* Use Realm as certs subject base nameSimo Sorce2010-11-181-6/+10
* Include time duration hints when configuring services in ipa-server-install.Rob Crittenden2010-10-081-2/+2
* Quote passwords when calling pkisilentRob Crittenden2010-10-011-6/+7
* Use consistent, specific nickname for the IPA CA certificate.Rob Crittenden2010-10-011-1/+2
* Remove passwords when running commands including stdout and stderrRob Crittenden2010-08-311-12/+3
* Break out install into more steps, add -key_algorithm to pkisilentRob Crittenden2010-08-191-20/+9
* use NSS for SSL operationsJohn Dennis2010-06-151-24/+0
* Catch the condition where dogtag is already configured (no preop.pin)Rob Crittenden2010-06-011-0/+3
* Move the dogtag SELinux rules loading into the spec fileRob Crittenden2010-05-271-24/+0
* Include -clone_uri argument to pkisilent setting the clone URI.Rob Crittenden2010-05-271-0/+2
* Handle CSRs whether they have NEW in the header or notRob Crittenden2010-05-031-3/+2
* Make the installer/uninstaller more aware of its stateRob Crittenden2010-05-031-0/+19
* Fix installing IPA with an external CARob Crittenden2010-04-231-1/+1
* Remove older MITM fixes to make compatible with dogtag 1.3.3Rob Crittenden2010-04-191-12/+2
* Configure the CRL URI in dogtag.Rob Crittenden2010-04-161-1/+4
* Provide mechanism in ipautil.run() to not log all arguments.Rob Crittenden2010-03-191-1/+10
* Make CA PKCS#12 location arg for ipa-replica-prepare, default /root/cacert.p12Rob Crittenden2010-03-191-0/+5
* Update dogtag configuration to work after CVE-2009-3555 changesRob Crittenden2010-01-271-0/+12
* User-defined certificate subjectsRob Crittenden2010-01-201-10/+18
* Create pkiuser before calling pkicreate, pkicreate depends on the user existingJohn Dennis2010-01-201-1/+1
* Missed explicit reference to pki-ca, replace with self.service_nameRob Crittenden2010-01-111-2/+2
* Change the service name to reflect changes in pki-ca (now pki-cad).Rob Crittenden2010-01-071-3/+3
* Make the IPA server host and its services "real" IPA entriesRob Crittenden2009-12-111-2/+2
* Add option to have ipautil.run() not raise an exceptionRob Crittenden2009-11-301-6/+6
* Add SELinux policy for CRL file publishing.Rob Crittenden2009-11-261-0/+26
* Cache installer questions for the 2-step process of an externally-signed CARob Crittenden2009-11-181-1/+2
* Add external CA signing and abstract out the RA backendRob Crittenden2009-09-151-53/+158
* Generate CRLs and make them available from the IPA web serverRob Crittenden2009-08-261-0/+46