IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-03 12:47:04 -06:00
Code Issues Packages Projects Releases Wiki Activity
2,612 Commits 11 Branches 59 Tags 60 MiB
26b0e8fc98
Commit Graph

2 Commits

Author SHA1 Message Date
Rob Crittenden
3ea044fb59 Handle CSRs whether they have NEW in the header or not 
Also consolidate some duplicate code
 2010-05-03 17:58:08 -06:00
Rob Crittenden
ab1667f3c1 Use pyasn1-based PKCS#10 and X509v3 parsers instead of pyOpenSSL. 
The pyOpenSSL PKCS#10 parser doesn't support attributes so we can't identify
requests with subject alt names.

Subject alt names are only allowed if:
  - the host for the alt name exists in IPA
  - if binding as host principal, the host is in the services managedBy attr
 2009-11-30 18:10:09 -07:00