Simo Sorce c565fa1781 Always check peer has keys before connecting ...

When pulling the DM password we may have the same issues reported in
ticket #6838 for CA keys.
This commit makes sure we always check the peer has keys before any
client operation.

Ticket #6838

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Michal Reznik <mreznik@redhat.com>

2017-07-13 10:04:11 +02:00

..

plugins

install: trust IPA CA for PKINIT

2017-05-19 12:31:24 +02:00

server

install: do not assume /etc/krb5.conf.d exists

2017-06-28 15:44:51 +02:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrust.py

Make a doctext more clear

2017-05-19 16:49:04 +02:00

adtrustinstance.py

adtrustinstance: write the conf as a string

2017-06-21 16:34:05 +02:00

bindinstance.py

py3: create DNS zonefile: use textual mode

2017-02-10 14:03:04 +01:00

ca.py

certdb: add named trust flag constants

2017-05-19 12:31:24 +02:00

cainstance.py

{ca,kra}instance: drop redundant URI argument from ad-hoc ldap2 connections

2017-07-04 12:06:33 +02:00

certs.py

certs: do not export CA certs in install_pem_from_p12

2017-05-19 12:31:24 +02:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

Always check peer has keys before connecting

2017-07-13 10:04:11 +02:00

dns.py

Remove network and broadcast address warnings

2017-06-20 11:29:41 +02:00

dnskeysyncinstance.py

py3: softhsm key_id must be bytes

2017-06-01 09:24:24 +02:00

dogtag.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

dogtaginstance.py

ipa-server-install: fix uninstall

2017-05-16 11:44:08 +00:00

dsinstance.py

install: trust IPA CA for PKINIT

2017-05-19 12:31:24 +02:00

httpinstance.py

Turn off OCSP check

2017-06-06 13:33:54 +02:00

installutils.py

CheckedIPAddress: remove match_local param

2017-06-20 11:29:41 +02:00

ipa_backup.py

py3: use ConfigParser instead of SafeConfigParser

2017-06-01 09:24:24 +02:00

ipa_cacert_manage.py

cacert manage: support PKINIT

2017-05-19 12:31:24 +02:00

ipa_kra_install.py

ca, kra install: validate DM password

2017-05-17 12:50:42 +02:00

ipa_ldap_updater.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

ipa_otptoken_import.py

py3: ipa_otptoken_import: fix calling unicode on bytes

2017-06-28 16:26:50 +02:00

ipa_pkinit_manage.py

pkinit manage: introduce ipa-pkinit-manage

2017-06-06 13:27:44 +02:00

ipa_replica_install.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

ipa_replica_prepare.py

py3: use ConfigParser instead of SafeConfigParser

2017-06-01 09:24:24 +02:00

ipa_restore.py

Changed ownership of ldiffile to DS_USER

2017-06-15 10:40:18 +02:00

ipa_server_certinstall.py

server certinstall: update KDC master entry

2017-06-06 13:27:44 +02:00

ipa_server_install.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

ipa_server_upgrade.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

ipa_winsync_migrate.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

kra.py

kra: promote: Get ticket before calling custodia

2017-06-15 10:10:27 +02:00

krainstance.py

{ca,kra}instance: drop redundant URI argument from ad-hoc ldap2 connections

2017-07-04 12:06:33 +02:00

krbinstance.py

install: do not assume /etc/krb5.conf.d exists

2017-06-28 15:44:51 +02:00

ldapupdate.py

py3: LDAP updates: use only bytes/raw values

2017-06-01 09:24:24 +02:00

ntpinstance.py

installer: Stop adding distro-specific NTP servers into ntp.conf

2017-01-05 10:45:30 +01:00

odsexporterinstance.py

services: replace admin_conn with api.Backend.ldap2

2016-11-22 16:17:27 +01:00

opendnssecinstance.py

Fix PKCS11 helper

2017-04-12 09:54:10 +02:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

ipa-replica-manage del (dl 0): remove server from defaultServerList

2017-05-19 19:00:48 +02:00

schemaupdate.py

py3: fix regression in schemaupdate

2017-06-02 09:55:13 +02:00

service.py

only stop/disable simple service if it is installed

2017-05-26 16:15:53 +02:00

sysupgrade.py

ipapython: move certmonger and sysrestore to ipalib.install

2016-11-29 14:50:51 +01:00

upgradeinstance.py

installer: update time estimates

2017-03-10 15:46:34 +01:00