summaryrefslogtreecommitdiffstats
path: root/ipalib/x509.py
Commit message (Expand)AuthorAgeFilesLines
* Remove __main__ code from ipalib.x509 and ipalib.pkcs10Fraser Tweedale2016-11-101-15/+0
* x509: use python-cryptography to process certsFraser Tweedale2016-11-101-165/+162
* x509: use pyasn1-modules X.509 specsFraser Tweedale2016-11-101-96/+7
* x509: avoid use of nss.data_to_hexFraser Tweedale2016-11-101-0/+23
* pkcs10: use python-cryptography for CSR processingFraser Tweedale2016-11-101-0/+39
* x509: include otherName DER value in GeneralNameInfoFraser Tweedale2016-08-261-4/+9
* x509: use NSS enums and OIDs to identify SAN typesFraser Tweedale2016-08-261-7/+23
* x509: fix SAN directoryName parsingFraser Tweedale2016-08-261-3/+9
* Move GeneralName parsing code to ipalib.x509Fraser Tweedale2016-08-261-1/+113
* Remove service and host cert issuer validationFraser Tweedale2016-06-061-26/+0
* Pylint: enable reimported checkMartin Basti2016-03-221-1/+0
* ipalib.x809: Accept bytes for make_pemPetr Viktorin2016-03-031-0/+2
* Avoid builtins that were removed in Python 3Petr Viktorin2016-01-201-1/+1
* ipalib/x509.py: revert deletion of ipalib api importMartin Babinsky2016-01-041-0/+1
* Remove unused importsMartin Basti2015-12-231-2/+0
* x509: Port to Python 3Petr Viktorin2015-10-131-1/+8
* Use the print functionPetr Viktorin2015-09-011-1/+3
* Modernize 'except' clausesPetr Viktorin2015-08-121-3/+3
* Fix client ca.crt to match the server's certGabe2015-07-271-1/+1
* reworked certificate normalization and revocationMartin Babinsky2015-07-021-3/+11
* Re-initialize NSS database after otptoken plugin testsTomas Babej2014-11-261-11/+20
* Check LDAP instead of local configuration to see if IPA CA is enabledJan Cholasta2014-10-171-1/+1
* Add functions for DER encoding certificate extensions to ipalib.x509.Jan Cholasta2014-07-301-0/+25
* Add function for writing list of certificates to a PEM file to ipalib.x509.Jan Cholasta2014-07-301-10/+30
* Add function for extracting extended key usage from certs to ipalib.x509.Jan Cholasta2014-07-301-0/+22
* Add functions for extracting certificates fields in DER to ipalib.x509.Jan Cholasta2014-07-301-0/+55
* Add function for checking if certificate is self-signed to ipalib.x509.Jan Cholasta2014-07-301-0/+6
* ipaplatform: Move all filesystem paths to ipaplatform.paths moduleTomas Babej2014-06-161-1/+2
* Skip cert issuer validation in service and host commands in CA-less install.Jan Cholasta2013-07-091-0/+3
* Drop --selfsign server functionalityPetr Viktorin2013-04-151-3/+1
* Don't initialize NSS if we don't have to, clean up unused cert refsRob Crittenden2013-01-231-13/+20
* Internationalization for public errorsPetr Viktorin2012-09-031-1/+2
* Use DN objects instead of stringsJohn Dennis2012-08-121-1/+1
* Use certmonger to renew CA subsystem certificatesRob Crittenden2012-07-301-0/+8
* Fix uses of O=REALM instead of the configured certificate subject base.Jan Cholasta2012-03-261-4/+18
* Verify that the external CA certificate files are correct.Jan Cholasta2011-08-231-1/+19
* Fix invalid issuer in unit testsMartin Kosek2011-07-271-2/+5
* Use information from the certificate subject when setting the NSS nickname.Rob Crittenden2011-07-171-8/+26
* Make data type of certificates more obvious/predictable internally.Rob Crittenden2011-06-211-6/+110
* Change FreeIPA license to GPLv3+Jakub Hrozek2010-12-201-5/+5
* Use newer API in ipalib/x509 and add missing import.Rob Crittenden2010-07-151-0/+1
* Clean up crypto code, take advantage of new nss-python capabilitiesRob Crittenden2010-07-151-236/+52
* Correct some comment errorsRob Crittenden2010-01-191-2/+1
* rebase dogtag clean-up patchJohn Dennis2009-12-091-4/+3
* Add type argument to x509.load_certificate() so it can handle binary certsRob Crittenden2009-12-011-9/+12
* Use pyasn1-based PKCS#10 and X509v3 parsers instead of pyOpenSSL.Rob Crittenden2009-11-301-0/+272