freeipa.git/install/tools/ipa-ca-install, branch custodia

Allow to install the KRA on a promoted server

2015-10-20T17:22:58+00:00

Signed-off-by: Simo Sorce

Allow ipa-ca-install to use the new promotion code

2015-10-20T17:22:54+00:00

This makes it possible to install a CA after-the-fact on a server
that has been promoted (and has no replica file available).

Signed-off-by: Simo Sorce

load RA backend plugins during standalone CA install on CA-less IPA master

2015-09-09T06:21:32+00:00

CA-less IPA master has 'ra_plugin' set to 'none' in IPA config. When setting
up Dogtag CA on the master we must override this setting in order to load
dogtag backend plugins and succesfully complete CA installation.

https://fedorahosted.org/freeipa/ticket/5288

Reviewed-By: Jan Cholasta

install: Move private_ccache from ipaserver to ipapython

2015-06-08T15:33:36+00:00

https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti

Move CA installation code into single module.

2015-06-08T06:22:54+00:00

https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Jan Cholasta

move realm_to_serverid to installutils module

2015-05-05T09:56:49+00:00

To avoid cyclic imports realm_to_serverid function had to be moved to
installutils from dsinstance.

Required for: https://fedorahosted.org/freeipa/ticket/4925

Reviewed-By: Martin Babinsky

Do not check if port 8443 is available in step 2 of external CA install

2014-10-22T12:20:27+00:00

The port is never available in step 2 of external CA install, as Dogtag is
already running.

https://fedorahosted.org/freeipa/ticket/4660

Reviewed-By: David Kupka

Check LDAP instead of local configuration to see if IPA CA is enabled

2014-10-17T10:53:11+00:00

The check is done using a new hidden command ca_is_enabled.

https://fedorahosted.org/freeipa/ticket/4621

Reviewed-By: David Kupka

Allow specifying signing algorithm of the IPA CA cert in ipa-ca-install

2014-10-16T11:33:40+00:00

The --ca-signing-algorithm option is available in ipa-server-install, make
it available in ipa-ca-install as well.

https://fedorahosted.org/freeipa/ticket/4447

Reviewed-By: Petr Vobornik

Support MS CS as the external CA in ipa-server-install and ipa-ca-install

2014-10-13T10:18:09+00:00

Added a new option --external-ca-type which specifies the type of the
external CA. It can be either "generic" (the default) or "ms-cs". If "ms-cs"
is selected, the CSR generated for the IPA CA will include MS template name
extension (OID 1.3.6.1.4.1.311.20.2) with template name "SubCA".

https://fedorahosted.org/freeipa/ticket/4496

Reviewed-By: Martin Kosek