freeipa.git/install/certmonger, branch mindatefix

ipa-certupdate: track lightweight CA certificates

2016-06-29T06:52:29+00:00

Enhance the ipa-certupdate program to add Certmonger tracking
requests for lightweight CA certificates.

Also update the dogtag-ipa-ca-renew-agent-submit to not store or
retrieve lightweight CA certificates, becaues Dogtag clones observe
renewals and update their NSSDBs on their own, and allow the helper
to request non-self-signed certificates.

Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Jan Cholasta

Load server plugins in certmonger renewal helper

2016-06-08T13:01:07+00:00

The certmonger renewal helper needs to load server plugins to
operate.  Initialise the API with in_server=True.

Fixes: https://fedorahosted.org/freeipa/ticket/5943
Reviewed-By: Jan Cholasta

Refactor ipautil.run

2015-12-14T09:54:23+00:00

The ipautil.run function now returns an object with returncode and
output are accessible as attributes.

The stdout and stderr of all commands are logged (unless skip_output is given).

The stdout/stderr contents must be explicitly requested with a keyword
argument, otherwise they are None.
This is because in Python 3, the output needs to be decoded, and that can
fail if it's not decodable (human-readable) text.

The raw (bytes) output is always available from the result object,
as is "leniently" decoded output suitable for logging.

All calls are changed to reflect this.

A use of Popen in cainstance is changed to ipautil.run.

Reviewed-By: Jan Cholasta

Alias "unicode" to "str" under Python 3

2015-09-17T09:08:43+00:00

The six way of doing this is to replace all occurences of "unicode"
with "six.text_type". However, "unicode" is non-ambiguous and
(arguably) easier to read. Also, using it makes the patches smaller,
which should help with backporting.

Reviewed-By: Petr Viktorin

Use the print function

2015-09-01T09:42:01+00:00

In Python 3, `print` is no longer a statement. Call it as a function
everywhere, and include the future import to remove the statement
in Python 2 code as well.

Reviewed-By: Christian Heimes 
Reviewed-By: Jan Cholasta

Modernize 'except' clauses

2015-08-12T16:17:23+00:00

The 'as' syntax works from Python 2 on, and Python 3 will
drop the "comma" syntax.

Reviewed-By: Tomas Babej

plugable: Pass API to plugins on initialization rather than using set_api

2015-07-01T13:05:30+00:00

https://fedorahosted.org/freeipa/ticket/3090

Reviewed-By: Martin Babinsky

Adopted kinit_keytab and kinit_password for kerberos auth

2015-04-20T08:27:35+00:00

Calls to ipautil.run using kinit were replaced with calls
kinit_keytab/kinit_password functions implemented in the PATCH 0015.

Reviewed-By: Jan Cholasta 
Reviewed-By: Simo Sorce 
Reviewed-By: Petr Spacek

Make certificate renewal process synchronized

2015-01-13T18:34:59+00:00

Synchronization is achieved using a global renewal lock.

https://fedorahosted.org/freeipa/ticket/4803

Reviewed-By: David Kupka

Fix CA certificate renewal syslog alert

2015-01-13T17:48:26+00:00

https://fedorahosted.org/freeipa/ticket/4820

Reviewed-By: David Kupka