freeipa.git - FreeIPA patches

	Commit message (Expand)	Author	Age	Files	Lines
...
*	Allow multiple CA certificates in replica info files.	Jan Cholasta	2014-07-30	1	-1/+15
*	Export full CA chain to /etc/ipa/ca.crt in ipa-server-install.	Jan Cholasta	2014-07-30	1	-0/+5
*	Add client certificate update tool ipa-certupdate.	Jan Cholasta	2014-07-30	7	-0/+238
*	Get up-to-date CA certificates from certificate store in ipa-replica-install.	Jan Cholasta	2014-07-30	1	-10/+18
*	Get CA certs for system-wide store from cert store in ipa-client-install.	Jan Cholasta	2014-07-30	4	-26/+100
*	Add functions for DER encoding certificate extensions to ipalib.x509.	Jan Cholasta	2014-07-30	1	-0/+25
*	Get CA certs for /etc/pki/nssdb from certificate store in ipa-client-install.	Jan Cholasta	2014-07-30	2	-43/+122
*	Allow overriding NSS database path in RPCClient.	Jan Cholasta	2014-07-30	1	-2/+5
*	Get CA certs for /etc/ipa/ca.crt from certificate store in ipa-client-install.	Jan Cholasta	2014-07-30	1	-26/+10
*	Add function for writing list of certificates to a PEM file to ipalib.x509.	Jan Cholasta	2014-07-30	3	-12/+32
*	Support multiple CA certificates in /etc/ipa/ca.crt in ipa-client-install.	Jan Cholasta	2014-07-30	1	-45/+51
*	Refactor CA certificate fetching code in ipa-client-install.	Jan Cholasta	2014-07-30	1	-51/+37
*	Upload renewed CA cert to certificate store on renewal.	Jan Cholasta	2014-07-30	1	-7/+2
*	Import CA certs from certificate store to HTTP NSS database on server install.	Jan Cholasta	2014-07-30	1	-0/+5
*	Import CA certs from certificate store to DS NSS database on replica install.	Jan Cholasta	2014-07-30	2	-1/+29
*	Add new add_cert method for adding certificates to NSSDatabase and CertDB.	Jan Cholasta	2014-07-30	2	-15/+13
*	Rename CertDB method add_cert to import_cert.	Jan Cholasta	2014-07-30	1	-3/+3
*	Upload CA chain from DS NSS database to certificate store on server update.	Jan Cholasta	2014-07-30	1	-16/+52
*	Upload CA chain from DS NSS database to certificate store on server install.	Jan Cholasta	2014-07-30	1	-19/+17
*	Add certificate store module ipalib.certstore.	Jan Cholasta	2014-07-30	1	-0/+397
*	Add function for extracting extended key usage from certs to ipalib.x509.	Jan Cholasta	2014-07-30	1	-0/+22
*	Add functions for extracting certificates fields in DER to ipalib.x509.	Jan Cholasta	2014-07-30	1	-0/+55
*	Add permissions for certificate store.	Jan Cholasta	2014-07-30	4	-0/+89
*	Configure attribute uniqueness for certificate store.	Jan Cholasta	2014-07-30	1	-0/+34
*	Add container for certificate store.	Jan Cholasta	2014-07-30	3	-0/+11
*	Add LDAP schema for certificate store.	Jan Cholasta	2014-07-30	4	-0/+11
*	Add LDAP schema for wrapped cryptographic keys.	Jan Cholasta	2014-07-30	1	-0/+7
*	Fix trust flags in HTTP and DS NSS databases.	Jan Cholasta	2014-07-30	5	-17/+54
*	Allow specifying trust flags in NSSDatabase and CertDB method trust_root_cert.	Jan Cholasta	2014-07-30	1	-4/+6
*	Remove certificate "External CA cert" from /etc/pki/nssdb on client uninstall.	Jan Cholasta	2014-07-30	1	-3/+7
*	Do not treat the IPA RA cert as CA cert in DS NSS database.	Jan Cholasta	2014-07-30	2	-10/+27
*	Allow IPA master hosts to read and update IPA master information.	Jan Cholasta	2014-07-30	2	-0/+42
*	Check that renewed certificates coming from LDAP are actually renewed.	Jan Cholasta	2014-07-30	1	-6/+32
*	Do not use ldapi in certificate renewal scripts.	Jan Cholasta	2014-07-30	4	-82/+107
*	Remove master ACIs when deleting a replica.	Jan Cholasta	2014-07-30	1	-0/+43
*	Pick new CA renewal master when deleting a replica.	Jan Cholasta	2014-07-30	2	-3/+20
*	Load sysupgrade.state on demand.	Jan Cholasta	2014-07-30	1	-1/+9
*	Alert user when externally signed CA is about to expire.	Jan Cholasta	2014-07-30	1	-1/+6
*	Add CA certificate management tool ipa-cacert-manage.	Jan Cholasta	2014-07-30	6	-2/+376
*	Add permissions for CA certificate renewal.	Jan Cholasta	2014-07-30	2	-0/+27
*	Add method for verifying CA certificates to NSSDatabase.	Jan Cholasta	2014-07-30	1	-0/+23
*	Move external cert validation from ipa-server-install to installutils.	Jan Cholasta	2014-07-30	2	-42/+53
*	Provide additional functions to ipapython.certmonger.	Jan Cholasta	2014-07-30	1	-0/+28
*	Add method for setting CA renewal master in LDAP to CAInstance.	Jan Cholasta	2014-07-30	1	-3/+38
*	Track CA certificate using dogtag-ipa-ca-renew-agent.	Jan Cholasta	2014-07-30	2	-9/+30
*	Automatically update CA certificate in LDAP on renewal.	Jan Cholasta	2014-07-30	1	-0/+28
*	Allow IPA master hosts to update CA certificate in LDAP.	Jan Cholasta	2014-07-30	1	-0/+2
*	Support CA certificate renewal in dogtag-ipa-ca-renew-agent.	Jan Cholasta	2014-07-30	1	-2/+47
*	Add function for checking if certificate is self-signed to ipalib.x509.	Jan Cholasta	2014-07-30	1	-0/+6
*	test_ipagetkeytab: Fix assertion in negative test	Petr Viktorin	2014-07-30	1	-4/+2