freeipa.git/tests/test_pkcs10/test_pkcs10.py, branch webui_isolate FreeIPA patches Make an ipa-tests package 2013-06-17T17:22:50+00:00 Petr Viktorin pviktori@redhat.com 2013-05-21T11:40:27+00:00 c60142efda817f030a7495cd6fe4a19953e55afa Rename the 'tests' directory to 'ipa-tests', and create an ipa-tests RPM containing the test suite Part of the work for: https://fedorahosted.org/freeipa/ticket/3654 
Rename the 'tests' directory to 'ipa-tests', and create an ipa-tests RPM
containing the test suite

Part of the work for: https://fedorahosted.org/freeipa/ticket/3654
Change FreeIPA license to GPLv3+ 2010-12-20T22:19:53+00:00 Jakub Hrozek jhrozek@redhat.com 2010-12-09T12:59:11+00:00 7493d781dfcaa7995f7864a09ad39ba6a89f1a9c The changes include: * Change license blobs in source files to mention GPLv3+ not GPLv2 only * Add GPLv3+ license text * Package COPYING not LICENSE as the license blobs (even the old ones) mention COPYING specifically, it is also more common, I think https://fedorahosted.org/freeipa/ticket/239 
The changes include:
 * Change license blobs in source files to mention GPLv3+ not GPLv2 only
 * Add GPLv3+ license text
 * Package COPYING not LICENSE as the license blobs (even the old ones)
   mention COPYING specifically, it is also more common, I think

 https://fedorahosted.org/freeipa/ticket/239
Drop our own PKCS#10 ASN.1 decoder and use the one from python-nss 2010-07-29T14:50:10+00:00 Rob Crittenden rcritten@redhat.com 2010-07-20T18:00:43+00:00 b7ca3d68c28b54500a2f908c4e2e6c89b2433461 This patch: - bumps up the minimum version of python-nss - will initialize NSS with nodb if a CSR is loaded and it isn't already init'd - will shutdown NSS if initialized in the RPC subsystem so we use right db - updated and added a few more tests Relying more on NSS introduces a bit of a problem. For NSS to work you need to have initialized a database (either a real one or no_db). But once you've initialized one and want to use another you have to close down the first one. I've added some code to nsslib.py to do just that. This could potentially have some bad side-effects at some point, it works ok now. 
This patch:
- bumps up the minimum version of python-nss
- will initialize NSS with nodb if a CSR is loaded and it isn't already
  init'd
- will shutdown NSS if initialized in the RPC subsystem so we use right db
- updated and added a few more tests

Relying more on NSS introduces a bit of a problem. For NSS to work you
need to have initialized a database (either a real one or no_db). But once
you've initialized one and want to use another you have to close down the
first one.  I've added some code to nsslib.py to do just that. This could
potentially have some bad side-effects at some point, it works ok now.
Use pyasn1-based PKCS#10 and X509v3 parsers instead of pyOpenSSL. 2009-12-01T01:10:09+00:00 Rob Crittenden rcritten@redhat.com 2009-11-24T21:07:44+00:00 ab1667f3c1607a22c6df49ceba58274347bc5826 The pyOpenSSL PKCS#10 parser doesn't support attributes so we can't identify requests with subject alt names. Subject alt names are only allowed if: - the host for the alt name exists in IPA - if binding as host principal, the host is in the services managedBy attr 
The pyOpenSSL PKCS#10 parser doesn't support attributes so we can't identify
requests with subject alt names.

Subject alt names are only allowed if:
  - the host for the alt name exists in IPA
  - if binding as host principal, the host is in the services managedBy attr