freeipa.git/install/certmonger, branch ipasam_getkeytab

Alias "unicode" to "str" under Python 3

2015-09-17T09:08:43+00:00

The six way of doing this is to replace all occurences of "unicode"
with "six.text_type". However, "unicode" is non-ambiguous and
(arguably) easier to read. Also, using it makes the patches smaller,
which should help with backporting.

Reviewed-By: Petr Viktorin

Use the print function

2015-09-01T09:42:01+00:00

In Python 3, `print` is no longer a statement. Call it as a function
everywhere, and include the future import to remove the statement
in Python 2 code as well.

Reviewed-By: Christian Heimes 
Reviewed-By: Jan Cholasta

Modernize 'except' clauses

2015-08-12T16:17:23+00:00

The 'as' syntax works from Python 2 on, and Python 3 will
drop the "comma" syntax.

Reviewed-By: Tomas Babej

plugable: Pass API to plugins on initialization rather than using set_api

2015-07-01T13:05:30+00:00

https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky

Adopted kinit_keytab and kinit_password for kerberos auth

2015-04-20T08:27:35+00:00

Calls to ipautil.run using kinit were replaced with calls
kinit_keytab/kinit_password functions implemented in the PATCH 0015.

Reviewed-By: Jan Cholasta 
Reviewed-By: Simo Sorce 
Reviewed-By: Petr Spacek

Make certificate renewal process synchronized

2015-01-13T18:34:59+00:00

Synchronization is achieved using a global renewal lock.

https://fedorahosted.org/freeipa/ticket/4803

Reviewed-By: David Kupka

Fix CA certificate renewal syslog alert

2015-01-13T17:48:26+00:00

https://fedorahosted.org/freeipa/ticket/4820

Reviewed-By: David Kupka

Do not renew the IPA CA cert by serial number in dogtag-ipa-ca-renew-agent

2014-12-09T12:16:49+00:00

Always use the full CSR when renewing the IPA CA certificate with Dogtag. The
IPA CA certificate may be issued by an external CA, in which case renewal by
serial number does not make sense and will fail if the IPA CA was initially
installed as a subordinate of an external CA.

https://fedorahosted.org/freeipa/ticket/4784

Reviewed-By: David Kupka

Fix automatic CA cert renewal endless loop in dogtag-ipa-ca-renew-agent

2014-12-09T12:06:47+00:00

Reset profile name after requesting the CA cert from Dogtag to prevent the
automatic renewal request from being restarted in subsequent calls.

https://fedorahosted.org/freeipa/ticket/4765

Reviewed-By: David Kupka

Fix wrong expiration date on renewed IPA CA certificates

2014-11-19T14:25:26+00:00

The expiration date was always set to the expiration date of the original
certificate.

https://fedorahosted.org/freeipa/ticket/4717

Reviewed-By: David Kupka