Jan Cholasta 09a49ad458 cainstance: use correct profile for lightweight CA certificates ...

Use Dogtag's `caCACert` CA certificate profile rather than the
`ipaCACertRenewal` virtual profile for lightweight CA certificates.

The `ipaCACertRenewal` virtual profile adds special handling of externally
signed CA certificates and LDAP replication of issued certificates on top
of `caCACert`, neither of which is relevant for lightweight CA
certificates.

Remove all of the special casing of lightweight CA certificates from
dogtag-ipa-ca-renew-agent-submit.

Make sure existing lightweight CA certmonger tracking requests are updated
on server upgrade.

https://pagure.io/freeipa/issue/5799

Reviewed-By: David Kupka <dkupka@redhat.com>
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>

2017-05-15 12:14:28 +02:00

..

advise

scripts, tests: explicitly set confdir in the rest of server code

2017-02-22 08:07:48 +00:00

dnssec

Fix PKCS11 helper

2017-04-12 09:54:10 +02:00

install

cainstance: use correct profile for lightweight CA certificates

2017-05-15 12:14:28 +02:00

plugins

Refresh Dogtag RestClient.ca_host property

2017-05-02 17:33:25 +02:00

secrets

ipa-kra-install: fix check_host_keys

2017-05-09 14:28:13 +02:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc.py

ipaserver/dcerpc: unify error processing

2017-04-11 14:16:39 +02:00

dns_data_management.py

Fix compatibility with python-dns 1.15.0

2016-10-11 15:45:41 +02:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

p11helper.py

Fix PKCS11 helper

2017-04-12 09:54:10 +02:00

rpcserver.py

kerberos session: use CA cert with full cert chain for obtaining cookie

2017-05-02 13:42:52 +02:00

servroles.py

Introduce "NTP server" role

2016-06-15 13:51:48 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Turn on NSSOCSP check in mod_nss conf

2017-05-10 09:08:34 +02:00

topology.py

Fix topologysuffix-verify failing connections

2016-06-24 13:32:02 +02:00