Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Use pyasn1-based PKCS#10 and X509v3 parsers instead of pyOpenSSL. | Rob Crittenden | 2009-11-30 | 5 | -0/+181 |
The pyOpenSSL PKCS#10 parser doesn't support attributes so we can't identify requests with subject alt names. Subject alt names are only allowed if: - the host for the alt name exists in IPA - if binding as host principal, the host is in the services managedBy attr |