IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Skip cert issuer validation in service and host commands in CA-less install.

Browse Source 
https://fedorahosted.org/freeipa/ticket/3736
This commit is contained in:
Jan Cholasta 2013-07-03 11:00:58 +02:00 committed by Rob Crittenden
parent 784f484cad
commit ec75348354
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ipalib/x509.py
View File

@ -61,9 +61,12 @@ def subject_base():
return _subject_base
def valid_issuer(issuer):
if not api.env.enable_ra:
return True
# Handle all supported forms of issuer -- currently dogtag only.
if api.env.ra_plugin == 'dogtag':
return DN(issuer) == DN(('CN', 'Certificate Authority'), subject_base())
return True
def strip_header(pem):
"""