summaryrefslogtreecommitdiffstats
path: root/ipaserver/install/cainstance.py
Commit message (Expand)AuthorAgeFilesLines
* Stop dogtag when updating its configuration in ipa-upgradeconfig.David Kupka2014-10-151-0/+3
* Support MS CS as the external CA in ipa-server-install and ipa-ca-installJan Cholasta2014-10-131-1/+13
* Check that port 8443 is available when installing PKI.David Kupka2014-10-101-0/+8
* Fix certmonger configuration in installer codeJan Cholasta2014-10-101-75/+12
* Do not crash in CAInstance.__init__ when default argument values are usedJan Cholasta2014-09-301-2/+8
* External CA installer options usability fixesJan Cholasta2014-09-301-2/+2
* Allow specifying signing algorithm of the IPA CA cert in ipa-server-install.Jan Cholasta2014-09-291-2/+10
* Refactoring of autobind, object_existsMartin Basti2014-09-261-1/+1
* ipaserver.install: Consolidate system user creationPetr Viktorin2014-09-231-17/+11
* Use autobind when updating CA people entries during certificate renewalJan Cholasta2014-09-091-11/+3
* Backup CS.cfg before modifying itJan Cholasta2014-09-051-0/+21
* Use certmonger D-Bus API instead of messing with its files.David Kupka2014-09-051-3/+3
* Normalize external CA cert before passing it to pkispawnJan Cholasta2014-09-041-2/+12
* Add a KRA to IPAAde Lee2014-08-221-347/+214
* Convert external CA chain to PKCS#7 before passing it to pkispawn.Jan Cholasta2014-08-141-1/+12
* Enable NSS PKIX certificate path discovery and validation for Dogtag.Jan Cholasta2014-07-301-0/+6
* Allow upgrading CA-less to CA-full using ipa-ca-install.Jan Cholasta2014-07-301-4/+4
* Fix trust flags in HTTP and DS NSS databases.Jan Cholasta2014-07-301-1/+3
* Do not use ldapi in certificate renewal scripts.Jan Cholasta2014-07-301-8/+13
* Add method for setting CA renewal master in LDAP to CAInstance.Jan Cholasta2014-07-301-3/+38
* Track CA certificate using dogtag-ipa-ca-renew-agent.Jan Cholasta2014-07-301-7/+13
* Always record that pkicreate has been executed.David Kupka2014-07-221-3/+10
* Allow SAN in IPA certificate profile.Jan Cholasta2014-06-241-0/+51
* ipaplatform: Move all filesystem paths to ipaplatform.paths moduleTomas Babej2014-06-161-35/+36
* ipaplatform: Remove redundant imports of ipaservicesTomas Babej2014-06-161-2/+1
* ipaplatform: Change service code in freeipa to use ipaplatform servicesTomas Babej2014-06-161-9/+10
* ipaplatform: Change platform dependant code in freeipa to use ipaplatform tasksTomas Babej2014-06-161-1/+2
* Remove unused method is_master of CAInstance.Jan Cholasta2014-03-251-15/+0
* Use the same certmonger configuration for both CA masters and clones.Jan Cholasta2014-03-251-92/+44
* Merge restart_httpd functionality to renew_ra_cert.Jan Cholasta2014-03-251-1/+1
* Merge restart_pkicad functionality to renew_ca_cert and remove restart_pkicad.Jan Cholasta2014-03-251-1/+1
* Make the default dogtag-ipa-ca-renew-agent behavior depend on CA setup.Jan Cholasta2014-03-251-4/+2
* Store information about which CA server is master for renewals in LDAP.Jan Cholasta2014-03-251-0/+15
* Use dogtag-ipa-ca-renew-agent to track certificates on master CA.Jan Cholasta2014-03-251-14/+23
* Use dogtag-ipa-ca-renew-agent to retrieve renewed certificates from LDAP.Jan Cholasta2014-03-251-10/+24
* Use certmonger D-Bus API to configure certmonger in CA install.Jan Cholasta2014-03-251-14/+24
* Fix certificate renewal scripts to work with separate CA DS instance.Jan Cholasta2014-03-251-18/+42
* ipa-replica-install never checks for 7389 portMartin Kosek2014-03-111-7/+5
* Convert remaining installer code to LDAPEntry API.Jan Cholasta2014-01-241-17/+18
* PKI service restart after CA renewal failedJan Cholasta2014-01-081-2/+2
* Use consistent realm name in cainstance and dsinstanceMartin Kosek2013-10-111-2/+2
* PKI installation on replica failing due to missing proxy confMartin Kosek2013-10-111-1/+3
* Make CS.cfg edits with CA instance stoppedTomas Babej2013-08-261-37/+59
* Change group ownership of CRL publish directoryTomas Babej2013-07-161-0/+13
* Remove code to install Dogtag 9Petr Viktorin2013-05-311-173/+10
* Specify the location for the agent PKCS#12 file so we don't have to move it.Rob Crittenden2013-05-061-3/+1
* Remove obsolete self-sign references from man pages, docstrings, commentsPetr Viktorin2013-04-151-3/+2
* Use A/AAAA records instead of CNAME records in ipa-ca.Jan Cholasta2013-04-151-3/+3
* Use only one URL for OCSP and CRL in IPA certificate profile.Jan Cholasta2013-04-111-45/+14
* Normalize RA agent certificateMartin Kosek2013-03-291-1/+4