freeipa.git/install/restart_scripts/renew_ra_cert, branch custodia

install: always export KRA agent PEM file

2015-10-08T11:42:58+00:00

Export the file even when KRA is not installed locally so that vault commands
work on all IPA replicas.

https://fedorahosted.org/freeipa/ticket/5302

Reviewed-By: Martin Basti

install: fix KRA agent PEM file permissions

2015-10-08T11:41:08+00:00

This fixes CVE-2015-5284.

https://fedorahosted.org/freeipa/ticket/5347

Reviewed-By: Martin Basti

cert renewal: Automatically update KRA agent PEM file

2015-08-27T13:53:42+00:00

https://fedorahosted.org/freeipa/ticket/5253

Reviewed-By: Alexander Bokovoy

Modernize 'except' clauses

2015-08-12T16:17:23+00:00

The 'as' syntax works from Python 2 on, and Python 3 will
drop the "comma" syntax.

Reviewed-By: Tomas Babej

Adopted kinit_keytab and kinit_password for kerberos auth

2015-04-20T08:27:35+00:00

Calls to ipautil.run using kinit were replaced with calls
kinit_keytab/kinit_password functions implemented in the PATCH 0015.

Reviewed-By: Jan Cholasta 
Reviewed-By: Simo Sorce 
Reviewed-By: Petr Spacek

Make certificate renewal process synchronized

2015-01-13T18:34:59+00:00

Synchronization is achieved using a global renewal lock.

https://fedorahosted.org/freeipa/ticket/4803

Reviewed-By: David Kupka

Do not use ldapi in certificate renewal scripts.

2014-07-30T14:04:21+00:00

This prevents SELinux denials when accessing the ldapi socket.

Reviewed-By: Rob Crittenden

ipaplatform: Remove redundant imports of ipaservices

2014-06-16T17:48:20+00:00

Also fixes few incorrect imports.

https://fedorahosted.org/freeipa/ticket/4052

Reviewed-By: Petr Viktorin

ipaplatform: Change service code in freeipa to use ipaplatform services

2014-06-16T17:48:19+00:00

https://fedorahosted.org/freeipa/ticket/4052

Reviewed-By: Petr Viktorin

Merge restart_httpd functionality to renew_ra_cert.

2014-03-25T15:54:55+00:00

Reviewed-By: Petr Viktorin