| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Nalin Dahyabhai <nalin@redhat.com> suggested
When creating certs, there is no reason to populate the country/state/local
info with bogus data. It's redundant, and unneed, so remote it.
Attempt to add support for adding the proper X509 extensions to
indicate what is or is not a CA cert. On my test machine, this
seems to segfault, so it's commented out at the moment.
Set CA key serial number to be a hash of the subject name. Better
than just the static '0' we were using, but still needs work.
|
|
|
|
|
|
|
|
|
| |
-list-signed shows a list of certs the certmaster has already signed
--list-cert-hashes returns the list of signed certs in the CN-hash format that
the acls files expects. Should make it a little easier to use the acls.
Both options take optional hostnames or hostname globs
|
|
|
|
|
|
|
|
| |
Steves comments:
Adding in triggering functionality, changed specfile and
MANIFEST.in to reflect changes. Added sub_process.py file to
facilitate the subprocesses necessary for triggering to work.
Modified certmaster.py to add trigger points.
|
|
|
|
|
|
|
|
| |
Steves comments:
Adding in triggering functionality, changed specfile and
MANIFEST.in to reflect changes. Added sub_process.py file to
facilitate the subprocesses necessary for triggering to work.
Modified certmaster.py to add trigger points.
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
if it had been
created, but not signed.
Also, add some debug logging.
|
|
|
|
|
| |
- use unique name for the certmaster logs
- some not quite working code for passing down client info so we can log
|
|
|
|
| |
update spec and setup accordingly
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
more to do.
|