freeipa.git - FreeIPA patches

	Commit message (Collapse)	Author	Age	Files	Lines
*	ipapython: move dnssec, p11helper and secrets to ipaserver	Jan Cholasta	2016-11-29	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \|	The dnssec and secrets subpackages and the p11helper module depend on ipaplatform. Move them to ipaserver as they are used only on the server. https://fedorahosted.org/freeipa/ticket/6474 Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
*	Setup lightweight CA key retrieval on install/upgrade	Fraser Tweedale	2016-06-09	1	-0/+32
	Add the ipa-pki-retrieve-key helper program and configure lightweight CA key replication on installation and upgrade. The specific configuration steps are: - Add the 'dogtag/$HOSTNAME' service principal - Create the pricipal's Custodia keys - Retrieve the principal's keytab - Configure Dogtag's CS.cfg to use ExternalProcessKeyRetriever to invoke ipa-pki-retrieve-key for key retrieval Also bump the minimum version of Dogtag to 10.3.2. Part of: https://fedorahosted.org/freeipa/ticket/4559 Reviewed-By: Jan Cholasta <jcholast@redhat.com>