Florence Blanc-Renaud 0c4a91348a Add cert checks in ipa-server-certinstall ...

When ipa-server-certinstall is called to install a new server certificate,
the prerequisite is that the certificate issuer must be already known by IPA.
This fix adds new checks to make sure that the tool exits before
modifying the target NSS database if it is not the case.
The fix consists in creating a temp NSS database with the CA certs from the
target NSS database + the new server cert and checking the new server cert
validity.

https://fedorahosted.org/freeipa/ticket/6263

Reviewed-By: Jan Cholasta <jcholast@redhat.com>

2016-09-19 07:58:44 +02:00

..

plugins

DNS server upgrade: do not fail when DNS server did not respond

2016-08-16 14:23:30 +02:00

server

Add check for IP addresses into DNS installer

2016-09-14 15:30:55 +02:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrustinstance.py

Raise error when running ipa-adtrust-install with empty netbios--name

2016-08-30 13:21:49 +02:00

bindinstance.py

Remove sys.exit from install modules and scripts

2016-08-16 18:22:44 +02:00

ca.py

Remove sys.exit from install modules and scripts

2016-08-16 18:22:44 +02:00

cainstance.py

Track lightweight CAs on replica installation

2016-09-06 12:11:53 +02:00

certs.py

Print to debug output answer from CA

2016-08-30 10:54:04 +02:00

custodiainstance.py

custodia: force reconnect before retrieving CA certs from LDAP

2016-09-01 13:11:09 +02:00

dns.py

Add check for IP addresses into DNS installer

2016-09-14 15:30:55 +02:00

dnskeysyncinstance.py

delegate removal of master DNS record and replica keys to separate functions

2016-06-17 18:55:19 +02:00

dogtaginstance.py

Skip CS.cfg update if cert nickname not known

2016-06-29 08:52:29 +02:00

dsinstance.py

Revert "Enable LDAPS in replica promotion"

2016-08-31 16:05:52 +02:00

httpinstance.py

Configure httpd service from installer instead of directly from RPM

2016-04-22 10:19:25 +02:00

installutils.py

Remove sys.exit from install modules and scripts

2016-08-16 18:22:44 +02:00

ipa_backup.py

ipa-backup: backup /etc/tmpfiles.d/dirsrv-<instance>.conf

2016-08-09 18:29:21 +02:00

ipa_cacert_manage.py

Improvements for the ipa-cacert-manage man and help

2016-08-09 16:09:08 +02:00

ipa_kra_install.py

Incorrect message when KRA already installed

2016-05-20 16:17:54 +02:00

ipa_ldap_updater.py

Remove sys.exit from install modules and scripts

2016-08-16 18:22:44 +02:00

ipa_otptoken_import.py

pylint: supress false positive no-member errors

2016-03-02 14:57:36 +01:00

ipa_replica_prepare.py

server install: do not prompt for cert file PIN repeatedly

2016-08-17 15:11:55 +02:00

ipa_restore.py

backup: use in-server API in ipa-backup and ipa-restore

2016-06-30 11:04:05 +02:00

ipa_server_certinstall.py

Add cert checks in ipa-server-certinstall

2016-09-19 07:58:44 +02:00

ipa_server_upgrade.py

Remove unused imports

2015-12-23 07:59:22 +01:00

ipa_winsync_migrate.py

fix incorrect name of ipa-winsync-migrate command in help

2016-03-02 12:52:14 +01:00

kra.py

Modify error message to install first instance of KRA

2015-12-02 17:21:32 +01:00

krainstance.py

Remove sys.exit from install modules and scripts

2016-08-16 18:22:44 +02:00

krbinstance.py

set krbcanonicalname on host entry during krbinstance configuration

2016-06-23 09:48:06 +02:00

ldapupdate.py

ldapupdate: Use proper inheritance in BadSyntax exception

2016-09-06 13:06:39 +02:00

memcacheinstance.py

Use absolute imports

2015-08-12 18:17:23 +02:00

ntpinstance.py

Add NTP to the list of services stored in IPA masters LDAP subtree

2016-06-15 13:51:48 +02:00

odsexporterinstance.py

ipaplatform: Move remaining user/group constants to ipaplatform.constants.

2016-03-23 13:32:55 +01:00

opendnssecinstance.py

Use ODS_USER/ODS_GROUP in opendnssec_conf.template

2016-03-23 13:32:55 +01:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

Remove sys.exit from install modules and scripts

2016-08-16 18:22:44 +02:00

schemaupdate.py

Server Upgrade: fix traceback caused by cidict

2015-09-03 14:11:52 +02:00

service.py

Fixes CA always being presented as running

2016-06-15 18:11:28 +02:00

sysupgrade.py

Remove wildcard imports

2015-12-23 07:59:22 +01:00

upgradeinstance.py

Remove wildcard imports

2015-12-23 07:59:22 +01:00