summaryrefslogtreecommitdiffstats
path: root/ipalib/x509.py
Commit message (Expand)AuthorAgeFilesLines
* Fix pylint warnings inconsistent-return-statementsChristian Heimes2017-12-181-1/+1
* x509: remove subject_base() functionStanislav Laznicka2017-11-011-13/+0
* x509: remove the strip_header() functionStanislav Laznicka2017-11-011-15/+0
* p11-kit: add serial number in DER formatStanislav Laznicka2017-10-171-0/+7
* py3: fix pkcs7 file processingFraser Tweedale2017-09-221-1/+1
* Don't write p11-kit EKU extension object if no EKUStanislav Laznicka2017-09-191-1/+4
* client: make ipa-client-install py3 compatibleStanislav Laznicka2017-08-021-1/+1
* Create a Certificate parameterStanislav Laznicka2017-07-271-38/+2
* Introduce load_unknown_x509_certificate()Stanislav Laznicka2017-07-271-0/+14
* x509: Make certificates represented as objectsStanislav Laznicka2017-07-271-204/+328
* Split x509.load_certificate() into PEM/DER functionsStanislav Laznicka2017-07-271-23/+33
* install: trust IPA CA for PKINITJan Cholasta2017-05-191-0/+2
* certdb: use certutil and match_hostname for cert verificationJan Cholasta2017-03-311-16/+55
* ipalib.x509: Handle missing SAN gracefullyDavid Kupka2017-02-071-1/+5
* py3: x509.py: return principal as unicode stringMartin Basti2017-02-071-6/+6
* py3: normalize_certificate: support both bytes and unicodeMartin Basti2017-01-311-6/+15
* py3: strip_header: support both bytes and unicodeMartin Basti2017-01-311-6/+10
* x509: use PyASN1 to parse PKCS#7Jan Cholasta2016-12-221-17/+31
* Add function for extracting PEM certs from PKCS #7Fraser Tweedale2016-12-121-1/+28
* Remove __main__ code from ipalib.x509 and ipalib.pkcs10Fraser Tweedale2016-11-101-15/+0
* x509: use python-cryptography to process certsFraser Tweedale2016-11-101-165/+162
* x509: use pyasn1-modules X.509 specsFraser Tweedale2016-11-101-96/+7
* x509: avoid use of nss.data_to_hexFraser Tweedale2016-11-101-0/+23
* pkcs10: use python-cryptography for CSR processingFraser Tweedale2016-11-101-0/+39
* x509: include otherName DER value in GeneralNameInfoFraser Tweedale2016-08-261-4/+9
* x509: use NSS enums and OIDs to identify SAN typesFraser Tweedale2016-08-261-7/+23
* x509: fix SAN directoryName parsingFraser Tweedale2016-08-261-3/+9
* Move GeneralName parsing code to ipalib.x509Fraser Tweedale2016-08-261-1/+113
* Remove service and host cert issuer validationFraser Tweedale2016-06-061-26/+0
* Pylint: enable reimported checkMartin Basti2016-03-221-1/+0
* ipalib.x809: Accept bytes for make_pemPetr Viktorin2016-03-031-0/+2
* Avoid builtins that were removed in Python 3Petr Viktorin2016-01-201-1/+1
* ipalib/x509.py: revert deletion of ipalib api importMartin Babinsky2016-01-041-0/+1
* Remove unused importsMartin Basti2015-12-231-2/+0
* x509: Port to Python 3Petr Viktorin2015-10-131-1/+8
* Use the print functionPetr Viktorin2015-09-011-1/+3
* Modernize 'except' clausesPetr Viktorin2015-08-121-3/+3
* Fix client ca.crt to match the server's certGabe2015-07-271-1/+1
* reworked certificate normalization and revocationMartin Babinsky2015-07-021-3/+11
* Re-initialize NSS database after otptoken plugin testsTomas Babej2014-11-261-11/+20
* Check LDAP instead of local configuration to see if IPA CA is enabledJan Cholasta2014-10-171-1/+1
* Add functions for DER encoding certificate extensions to ipalib.x509.Jan Cholasta2014-07-301-0/+25
* Add function for writing list of certificates to a PEM file to ipalib.x509.Jan Cholasta2014-07-301-10/+30
* Add function for extracting extended key usage from certs to ipalib.x509.Jan Cholasta2014-07-301-0/+22
* Add functions for extracting certificates fields in DER to ipalib.x509.Jan Cholasta2014-07-301-0/+55
* Add function for checking if certificate is self-signed to ipalib.x509.Jan Cholasta2014-07-301-0/+6
* ipaplatform: Move all filesystem paths to ipaplatform.paths moduleTomas Babej2014-06-161-1/+2
* Skip cert issuer validation in service and host commands in CA-less install.Jan Cholasta2013-07-091-0/+3
* Drop --selfsign server functionalityPetr Viktorin2013-04-151-3/+1
* Don't initialize NSS if we don't have to, clean up unused cert refsRob Crittenden2013-01-231-13/+20