From bc0c60688505968daf6851e3e179aab20e23af7d Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Mon, 25 May 2015 08:39:07 -0400 Subject: Add CA ACL plugin Implement the caacl commands, which are used to indicate which principals may be issued certificates from which (sub-)CAs, using which profiles. At this commit, and until sub-CAs are implemented, all rules refer to the top-level CA (represented as ".") and no ca-ref argument is exposed. Also, during install and upgrade add a default CA ACL that permits certificate issuance for all hosts and services using the profile 'caIPAserviceCert' on the top-level CA. Part of: https://fedorahosted.org/freeipa/ticket/57 Part of: https://fedorahosted.org/freeipa/ticket/4559 Reviewed-By: Martin Basti --- VERSION | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'VERSION') diff --git a/VERSION b/VERSION index a8d484cce..639952df5 100644 --- a/VERSION +++ b/VERSION @@ -90,5 +90,5 @@ IPA_DATA_VERSION=20100614120000 # # ######################################################## IPA_API_VERSION_MAJOR=2 -IPA_API_VERSION_MINOR=127 -# Last change: jcholast - add kra_is_enabled +IPA_API_VERSION_MINOR=128 +# Last change: ftweedal - add caacl plugin -- cgit