freeipa/ipaplatform
Jan Cholasta 11b8a34346 client install: fix client PKINIT configuration
Set `pkinit_anchors` in `krb5.conf` to a CA certificate bundle of CAs
trusted to issue KDC certificates rather than `/etc/ipa/ca.crt`.

Set `pkinit_pool` in `krb5.conf` to a CA certificate bundle of all CAs
known to IPA.

Make sure both bundles are exported in all installation code paths.

https://pagure.io/freeipa/issue/6831

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
2017-05-19 12:31:24 +02:00
..
base client install: fix client PKINIT configuration 2017-05-19 12:31:24 +02:00
debian ipaplatform/debian/paths: Add some missing values. 2017-03-15 09:53:08 +01:00
fedora Break ipaplatform / ipalib import cycle of hell 2016-11-24 16:30:32 +01:00
redhat Create system users for FreeIPA services during package installation 2017-04-11 17:51:49 +02:00
rhel Break ipaplatform / ipalib import cycle of hell 2016-11-24 16:30:32 +01:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Remove NSPRError exception from platform tasks 2017-03-01 15:58:59 +01:00