freeipa.git, branch asn1c-indented

Use asn1c helpers to encode/decode the getkeytab control

2014-11-20T15:34:27+00:00

Replaces manual encoding with automatically generated code.

Fixes:
https://fedorahosted.org/freeipa/ticket/4718
https://fedorahosted.org/freeipa/ticket/4728

Add asn1c generated code for keytab controls

2014-11-20T15:34:27+00:00

Instead of manually encoding controls, use an actual asn1 compiler.
The file asn1/asn1c/ipa.asn1 will contain ipa modules. The generated code
is committed to the tree and built into a static library that is linked
to the code that uses it.

The first module implements the GetKeytabControl control.

Related:
https://fedorahosted.org/freeipa/ticket/4718
https://fedorahosted.org/freeipa/ticket/4728

Fix filtering of enctypes in server code.

2014-11-20T15:34:27+00:00

The filtering was incorrect and would result in always discarding all values.
Also make sure there are no duplicates in the list.

Partial fix for:
https://fedorahosted.org/freeipa/ticket/4718

Add additional backup & restore checks

2014-11-20T14:47:38+00:00

https://fedorahosted.org/freeipa/ticket/3893

Reviewed-By: Martin Basti

Raise right exception if domain name is not valid

2014-11-20T14:41:36+00:00

Because of dnspython implementation, in some cases UnicodeError is
raised instead of DNS SyntaxError

Ticket: https://fedorahosted.org/freeipa/ticket/4734
Reviewed-By: Jan Cholasta

webui: fix potential XSS vulnerabilities

2014-11-20T14:31:15+00:00

Escape user defined text to prevent XSS attacks. Extra precaution was taken
to escape also parts which are unlikely to contain user-defined text.

fixes CVE-2014-7850

https://fedorahosted.org/freeipa/ticket/4742

Reviewed-By: Tomas Babej

Show warning instead of error if CA did not start

2014-11-20T09:30:22+00:00

This is just workaround, checking if CA is working raises false positive
exception during upgrade

Ticket: https://fedorahosted.org/freeipa/ticket/4676
Reviewed-By: Simo Sorce

Do not restore SELinux settings that were not backed up

2014-11-19T14:47:45+00:00

https://fedorahosted.org/freeipa/ticket/4678

Reviewed-By: Petr Vobornik

Fix wrong expiration date on renewed IPA CA certificates

2014-11-19T14:25:26+00:00

The expiration date was always set to the expiration date of the original
certificate.

https://fedorahosted.org/freeipa/ticket/4717

Reviewed-By: David Kupka

Fix warning message should not contain CLI commands

2014-11-19T14:20:55+00:00

Message is now universal for both CLI and WebUI

Ticket: https://fedorahosted.org/freeipa/ticket/4647
Reviewed-By: Petr Vobornik