diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2009-11-24 16:07:44 -0500 |
|---|---|---|
| committer | Jason Gerard DeRose <jderose@redhat.com> | 2009-11-30 18:10:09 -0700 |
| commit | ab1667f3c1607a22c6df49ceba58274347bc5826 (patch) | |
| tree | bc2e6102d3d9cd103d2418ad5372e164e0e7533d /ipapython | |
| parent | 7c2c2d6130648fb6dd7c0e52d802cc6eff39ef95 (diff) | |
| download | freeipa-ab1667f3c1607a22c6df49ceba58274347bc5826.tar.gz freeipa-ab1667f3c1607a22c6df49ceba58274347bc5826.tar.xz freeipa-ab1667f3c1607a22c6df49ceba58274347bc5826.zip | |
Use pyasn1-based PKCS#10 and X509v3 parsers instead of pyOpenSSL.
The pyOpenSSL PKCS#10 parser doesn't support attributes so we can't identify
requests with subject alt names.
Subject alt names are only allowed if:
- the host for the alt name exists in IPA
- if binding as host principal, the host is in the services managedBy attr
Diffstat (limited to 'ipapython')
0 files changed, 0 insertions, 0 deletions