summaryrefslogtreecommitdiffstats
path: root/certmaster
Commit message (Collapse)AuthorAgeFilesLines
* change the default messageDigest to sha1 from md5.alikins-develAdrian Likins2008-06-271-1/+1
|
* first set of patches trying to cleanup some of the ssl stuff thatAdrian Likins2008-06-271-12/+32
| | | | | | | | | | | | | | Nalin Dahyabhai <nalin@redhat.com> suggested When creating certs, there is no reason to populate the country/state/local info with bogus data. It's redundant, and unneed, so remote it. Attempt to add support for adding the proper X509 extensions to indicate what is or is not a CA cert. On my test machine, this seems to segfault, so it's commented out at the moment. Set CA key serial number to be a hash of the subject name. Better than just the static '0' we were using, but still needs work.
* add two new options to "certmaster-ca"Adrian Likins2008-04-301-0/+40
| | | | | | | | | -list-signed shows a list of certs the certmaster has already signed --list-cert-hashes returns the list of signed certs in the CN-hash format that the acls files expects. Should make it a little easier to use the acls. Both options take optional hostnames or hostname globs
* apply triggers patch from Steve Salevan <ssalevan@redhat.com>Adrian Likins2008-04-221-0/+1221
| | | | | | | | Steves comments: Adding in triggering functionality, changed specfile and MANIFEST.in to reflect changes. Added sub_process.py file to facilitate the subprocesses necessary for triggering to work. Modified certmaster.py to add trigger points.
* apply triggers patch from Steve Salevan <ssalevan@redhat.com>Adrian Likins2008-04-222-7/+60
| | | | | | | | Steves comments: Adding in triggering functionality, changed specfile and MANIFEST.in to reflect changes. Added sub_process.py file to facilitate the subprocesses necessary for triggering to work. Modified certmaster.py to add trigger points.
* more logging info. log info for sign_this_csr()Adrian Likins2008-03-181-2/+9
|
* be a bit more verbose in the logging here, add file location info to logsAdrian Likins2008-03-181-1/+1
|
* fix a bug where certmaster was writing out the client csr file over and over ↵Adrian Likins2008-03-181-15/+4
| | | | | | | | if it had been created, but not signed. Also, add some debug logging.
* certmaster logging cleanupsAdrian Likins2008-03-172-7/+21
| | | | | - use unique name for the certmaster logs - some not quite working code for passing down client info so we can log
* remove unused certmaster/minion/ and certmaster/overlord/ dirsAdrian Likins2008-03-1717-2994/+0
| | | | update spec and setup accordingly
* add some basic logging output to certmasterAdrian Likins2008-03-172-2/+24
|
* Config file tweaksMichael DeHaan2008-02-251-1/+18
|
* Make hostname checking smarter.Michael DeHaan2008-02-251-8/+18
|
* Add missing fileMichael DeHaan2008-02-251-0/+22
|
* Find and replaceMichael DeHaan2008-02-253-8/+7
|
* Certmaster hostname check is different than minion checkMichael DeHaan2008-02-252-17/+17
|
* Pushing changes as part of certmaster splitMichael DeHaan2008-02-254-15/+141
|
* Trimming more stuff out.Michael DeHaan2008-02-0759-3312/+26
|
* Carving away at func some more to just get down to cert items, still lotsMichael DeHaan2008-02-0781-0/+7714
more to do.