freeipa.git/install/tools/ipa-ca-install, branch kdc-fixes FreeIPA patches install: Move private_ccache from ipaserver to ipapython 2015-06-08T15:33:36+00:00 Jan Cholasta jcholast@redhat.com 2015-06-04T11:59:22+00:00 08229a0c5457d4e0c13d6b02a1f38f60ea787856 https://fedorahosted.org/freeipa/ticket/4468 Reviewed-By: Martin Basti <mbasti@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Martin Basti <mbasti@redhat.com>
Move CA installation code into single module. 2015-06-08T06:22:54+00:00 David Kupka dkupka@redhat.com 2015-06-08T05:23:56+00:00 2acedb2d5d4a4c0987c670e14eb04b8bd9ffc034 https://fedorahosted.org/freeipa/ticket/4468 Reviewed-By: Jan Cholasta <jcholast@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4468

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
move realm_to_serverid to installutils module 2015-05-05T09:56:49+00:00 Martin Basti mbasti@redhat.com 2015-04-27T12:42:31+00:00 522cbb23f129033f836e40282ca41e76d315cbe3 To avoid cyclic imports realm_to_serverid function had to be moved to installutils from dsinstance. Required for: https://fedorahosted.org/freeipa/ticket/4925 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> 
To avoid cyclic imports realm_to_serverid function had to be moved to
installutils from dsinstance.

Required for: https://fedorahosted.org/freeipa/ticket/4925

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Do not check if port 8443 is available in step 2 of external CA install 2014-10-22T12:20:27+00:00 Jan Cholasta jcholast@redhat.com 2014-10-22T09:18:35+00:00 50e66337340ae8f9c243658b58409de4e911d1c4 The port is never available in step 2 of external CA install, as Dogtag is already running. https://fedorahosted.org/freeipa/ticket/4660 Reviewed-By: David Kupka <dkupka@redhat.com> 
The port is never available in step 2 of external CA install, as Dogtag is
already running.

https://fedorahosted.org/freeipa/ticket/4660

Reviewed-By: David Kupka <dkupka@redhat.com>
Check LDAP instead of local configuration to see if IPA CA is enabled 2014-10-17T10:53:11+00:00 Jan Cholasta jcholast@redhat.com 2014-10-13T12:30:15+00:00 608851d3f86a9082b394c30fe0c7a7b33d43f363 The check is done using a new hidden command ca_is_enabled. https://fedorahosted.org/freeipa/ticket/4621 Reviewed-By: David Kupka <dkupka@redhat.com> 
The check is done using a new hidden command ca_is_enabled.

https://fedorahosted.org/freeipa/ticket/4621

Reviewed-By: David Kupka <dkupka@redhat.com>
Allow specifying signing algorithm of the IPA CA cert in ipa-ca-install 2014-10-16T11:33:40+00:00 Jan Cholasta jcholast@redhat.com 2014-10-08T10:18:06+00:00 cf860c71545fe93bebcb7dcb426795240e776eb3 The --ca-signing-algorithm option is available in ipa-server-install, make it available in ipa-ca-install as well. https://fedorahosted.org/freeipa/ticket/4447 Reviewed-By: Petr Vobornik <pvoborni@redhat.com> 
The --ca-signing-algorithm option is available in ipa-server-install, make
it available in ipa-ca-install as well.

https://fedorahosted.org/freeipa/ticket/4447

Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
Support MS CS as the external CA in ipa-server-install and ipa-ca-install 2014-10-13T10:18:09+00:00 Jan Cholasta jcholast@redhat.com 2014-10-08T08:51:31+00:00 4cdeacdedfe344e570da99548043a07a6fa24dbe Added a new option --external-ca-type which specifies the type of the external CA. It can be either "generic" (the default) or "ms-cs". If "ms-cs" is selected, the CSR generated for the IPA CA will include MS template name extension (OID 1.3.6.1.4.1.311.20.2) with template name "SubCA". https://fedorahosted.org/freeipa/ticket/4496 Reviewed-By: Martin Kosek <mkosek@redhat.com> 
Added a new option --external-ca-type which specifies the type of the
external CA. It can be either "generic" (the default) or "ms-cs". If "ms-cs"
is selected, the CSR generated for the IPA CA will include MS template name
extension (OID 1.3.6.1.4.1.311.20.2) with template name "SubCA".

https://fedorahosted.org/freeipa/ticket/4496

Reviewed-By: Martin Kosek <mkosek@redhat.com>
Check that port 8443 is available when installing PKI. 2014-10-10T09:57:44+00:00 David Kupka dkupka@redhat.com 2014-09-29T08:27:30+00:00 35c7bd05afd9b1c5d3f3b0049773535e65b8d080 https://fedorahosted.org/freeipa/ticket/4564 Reviewed-By: Martin Kosek <mkosek@redhat.com> 
https://fedorahosted.org/freeipa/ticket/4564

Reviewed-By: Martin Kosek <mkosek@redhat.com>
Fix ImportError in ipa-ca-install 2014-09-30T07:35:28+00:00 Martin Kosek mkosek@redhat.com 2014-09-30T07:35:28+00:00 2421b13a9b8bd79084e9cfe488690057445d7aa7 Patch 3aa0731f was not merged correctly and import for a function that no longer exists. This patch fixes the import. https://fedorahosted.org/freeipa/ticket/4480 
Patch 3aa0731f was not merged correctly and import for a function
that no longer exists. This patch fixes the import.

https://fedorahosted.org/freeipa/ticket/4480
External CA installer options usability fixes 2014-09-30T06:50:47+00:00 Jan Cholasta jcholast@redhat.com 2014-09-24T14:31:39+00:00 3aa0731fc660ea3d111a44926ab5dea71dc510e7 The --external_cert_file and --external_ca_file options of ipa-server-install and ipa-ca-install have been replaced by --external-cert-file option which accepts multiple files. The files are accepted in PEM and DER certificate and PKCS#7 certificate chain formats. https://fedorahosted.org/freeipa/ticket/4480 Reviewed-By: Petr Viktorin <pviktori@redhat.com> 
The --external_cert_file and --external_ca_file options of ipa-server-install
and ipa-ca-install have been replaced by --external-cert-file option which
accepts multiple files. The files are accepted in PEM and DER certificate and
PKCS#7 certificate chain formats.

https://fedorahosted.org/freeipa/ticket/4480

Reviewed-By: Petr Viktorin <pviktori@redhat.com>