Fraser Tweedale 0d37d230c0 Optionally add service name to Custodia key DNs ... Lightweight CAs support introduces new service principals for Dogtag, with Custodia keys. The current Custodia key creation uses a DN that contains only they key type and the hostname, so keys for multiple services on the same host cannot be created. Add the 'generate_keys' method to generate keys for a host or an arbitrary service. When a service name is given, add the key entries in a nested container with RDN 'cn=<service name>'. (The container is assumed to exist). This change does not affect searching because subtree search is used, filtering on the ipaKeyUsage and memberPrincipal attributes. Part of: https://fedorahosted.org/freeipa/ticket/4559 Reviewed-By: Jan Cholasta <jcholast@redhat.com>		2016-06-09 09:04:27 +02:00
..
__init__.py	Add ipa-custodia service	2015-10-15 14:24:33 +02:00
client.py	Allow CustodiaClient to be used by arbitrary principals	2016-06-08 10:16:28 +02:00
common.py	Add ipa-custodia service	2015-10-15 14:24:33 +02:00
kem.py	Optionally add service name to Custodia key DNs	2016-06-09 09:04:27 +02:00
store.py	ipapython.secrets: Port to Python 3	2015-10-27 17:23:25 +01:00