summaryrefslogtreecommitdiffstats
path: root/ipaserver/install/certs.py
Commit message (Expand)AuthorAgeFilesLines
* Skip empty lines when parsing pk12util output.Jan Cholasta2013-06-121-1/+1
* Handle exceptions gracefully when verifying PKCS#12 files.Jan Cholasta2013-06-121-1/+7
* Drop --selfsign server functionalityPetr Viktorin2013-04-151-481/+102
* Load the CA cert into server NSS databasesPetr Viktorin2013-04-021-2/+9
* Support installing with custom SSL certs, without a CAPetr Viktorin2013-04-021-6/+54
* Trust CAs from PKCS#12 files even if they don't have Friendly NamesPetr Viktorin2013-04-021-1/+2
* ipaserver.install.certs: Introduce NSSDatabase as a more generic certutil wra...Petr Viktorin2013-04-021-95/+191
* Remove unused imports from ipaserver/installPetr Viktorin2013-03-011-11/+2
* Drop ipapython.compat.Jan Cholasta2013-02-011-2/+1
* Use secure method to acquire IPA CA certificateJohn Dennis2013-01-231-1/+4
* Use correct Dogtag port in ipaserver.install.certsPetr Viktorin2012-09-201-2/+2
* Use Dogtag 10 only when it is availablePetr Viktorin2012-09-171-4/+14
* Internationalization for public errorsPetr Viktorin2012-09-031-2/+4
* Use DN objects instead of stringsJohn Dennis2012-08-121-12/+14
* Configure certmonger to execute restart scripts on renewal.Rob Crittenden2012-04-101-2/+12
* Move the compat module from ipalib to ipapython.Jan Cholasta2012-02-131-1/+1
* ticket 2022 - modify codebase to utilize IPALogManager, obsoletes loggingJohn Dennis2011-11-231-7/+7
* Detect CA installation type in ipa-replica-prepare and ipa-ca-install.Rob Crittenden2011-09-271-0/+13
* Convert server install code to platform-independent access to system servicesAlexander Bokovoy2011-09-131-11/+14
* Use the IPA server cert profile in the installer.Rob Crittenden2011-08-301-1/+1
* enable proxy for dogtagAdam Young2011-08-291-2/+2
* Make sure messagebus is running prior to starting certmonger.Jan Cholasta2011-08-181-0/+2
* Clean up existing DN object usageJohn Dennis2011-07-291-6/+8
* Generate a database password by default in all cases.Rob Crittenden2011-07-171-1/+1
* Use information from the certificate subject when setting the NSS nickname.Rob Crittenden2011-07-171-5/+20
* Make dogtag an optional (and default un-) installed component in a replica.Rob Crittenden2011-06-231-1/+3
* Make data type of certificates more obvious/predictable internally.Rob Crittenden2011-06-211-2/+15
* Fix assorted bugs found by pylintJakub Hrozek2011-01-251-1/+1
* Change FreeIPA license to GPLv3+Jakub Hrozek2010-12-201-5/+5
* Move Selfsigned CA creation out of dsinstanceSimo Sorce2010-12-101-1/+9
* pkinit-replica: create certificates for replicas tooSimo Sorce2010-11-181-0/+12
* Add support for configuring KDC certs for PKINITSimo Sorce2010-11-181-4/+84
* Use Realm as certs subject base nameSimo Sorce2010-11-181-5/+10
* Use consistent, specific nickname for the IPA CA certificate.Rob Crittenden2010-10-011-9/+5
* Automatically convert a v1-style ca_serialno to the v2 config style.Rob Crittenden2010-09-241-1/+13
* Properly handle CertificateOperationErrors in replication prepration.Rob Crittenden2010-09-241-0/+1
* Fix certmonger errors when doing a client or server uninstall.Rob Crittenden2010-09-091-16/+11
* Have certmonger track the initial Apache and 389-ds server certs.Rob Crittenden2010-09-091-2/+49
* use NSS for SSL operationsJohn Dennis2010-06-151-24/+0
* Handle CSRs whether they have NEW in the header or notRob Crittenden2010-05-031-12/+3
* Remove older MITM fixes to make compatible with dogtag 1.3.3Rob Crittenden2010-04-191-2/+2
* Don't let failure to trust the CA abort the server installation.Rob Crittenden2010-04-071-2/+5
* Don't assume local directory is valid or writable.Rob Crittenden2010-02-191-1/+6
* Move the HTTP/S request code to a common libraryRob Crittenden2010-02-091-31/+16
* Be more careful when base64-decoding certificatesRob Crittenden2010-02-021-8/+5
* Update dogtag configuration to work after CVE-2009-3555 changesRob Crittenden2010-01-271-4/+4
* User-defined certificate subjectsRob Crittenden2010-01-201-6/+19
* Make the IPA server host and its services "real" IPA entriesRob Crittenden2009-12-111-0/+12
* Add option to have ipautil.run() not raise an exceptionRob Crittenden2009-11-301-5/+5
* Add external CA signing and abstract out the RA backendRob Crittenden2009-09-151-87/+207