Rob Crittenden 191aec5a52 Use the APIClient instead of direct REST calls for ACME ...

Drop the use of direct REST calls in favor of using the
APIClient based on the pki python API.

Fixes: https://pagure.io/freeipa/issue/9738

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Rafael Guterres Jeffman <rjeffman@redhat.com>
Reviewed-By: Thomas Woerner <twoerner@redhat.com>

2025-11-19 16:50:37 -05:00

..

plugins

Set krbCanonicalName=admin@REALM on the admin user

2025-06-17 09:48:44 +02:00

server

Add config option for RSA key size for HTTP, DS, PKINIT, RA certs

2025-11-19 16:50:37 -05:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

acmeinstance.py

Don't rely on removing the CA to uninstall the ACME depoyment

2024-10-03 13:17:53 -04:00

adtrust.py

adtrust install: define constants for rid bases

2021-11-02 10:11:28 +01:00

adtrustinstance.py

Make path of Samba lock directory configurable and use /run/samba on Debian

2025-03-10 19:15:09 +05:30

bindinstance.py

dns: disable all previous Unbound configuration before deploying ours

2025-07-29 17:14:45 +02:00

ca.py

install: make use of shared temp directory for hsm validation

2025-07-25 16:00:15 -04:00

cainstance.py

Use the APIClient instead of direct REST calls for ACME

2025-11-19 16:50:37 -05:00

certs.py

Replace REST with PKI python API for cert and LWCA

2025-11-19 16:50:37 -05:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

Clean up more files and directories created by the installer(s)

2024-06-26 07:40:54 +02:00

dns.py

DNS over TLS: use system trust store

2025-09-01 13:52:09 +02:00

dnskeysyncinstance.py

ipa-dnskeysyncd: use systemd-tmpfiles to handle tokens

2025-05-06 13:48:35 +02:00

dogtag.py

Verify pki ini override early

2019-04-10 13:43:23 +02:00

dogtaginstance.py

Add token options to immutables for pki override

2025-06-20 16:30:04 +02:00

dsinstance.py

Refactor installer cert issuance to use pki python lib

2025-11-19 16:50:37 -05:00

httpinstance.py

Refactor installer cert issuance to use pki python lib

2025-11-19 16:50:37 -05:00

installutils.py

Add config option for RSA key size for HTTP, DS, PKINIT, RA certs

2025-11-19 16:50:37 -05:00

ipa_acme_manage.py

Use the APIClient instead of direct REST calls for ACME

2025-11-19 16:50:37 -05:00

ipa_backup.py

Backup-restore: backup krb5.conf.d snippet files

2025-11-07 15:50:56 +01:00

ipa_cacert_manage.py

Don't require certificates to have unique ipaCertSubject

2025-03-21 13:26:39 -04:00

ipa_cert_fix.py

Add a check into ipa-cert-fix tool to avoid updating certs if CA is close to being expired.

2025-03-25 10:33:06 +01:00

ipa_crlgen_manage.py

CRL generation master: new utility to enable|disable

2019-03-14 09:39:55 +01:00

ipa_idrange_fix.py

ipa-idrange-fix: check that IPA server is installed

2025-06-19 13:48:18 +02:00

ipa_kra_install.py

Unify use of option parsers

2025-01-15 12:18:46 +01:00

ipa_ldap_updater.py

Remove -s option from ipa-ldap-updater usage

2021-05-20 14:45:27 -04:00

ipa_migrate_constants.py

ipa-migrate - only remove repl state attribute options

2025-06-23 08:15:21 +02:00

ipa_migrate.py

ipa-migrate - only remove repl state attribute options

2025-06-23 08:15:21 +02:00

ipa_otptoken_import.py

pyca: adapt import paths for TripleDES cipher

2024-12-04 09:50:44 +01:00

ipa_pkinit_manage.py

Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server

2021-06-17 17:28:48 -04:00

ipa_replica_install.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

ipa_restore.py

ipa tools: remove sensitive material from the commandline

2025-01-15 12:18:46 +01:00

ipa_server_certinstall.py

Don't require certificates to have unique ipaCertSubject

2025-03-21 13:26:39 -04:00

ipa_server_install.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

ipa_server_upgrade.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipa_subids.py

config-mod: allow disabling subordinate ID integration

2025-03-13 21:22:37 +05:30

ipa_trust_enable_agent.py

ipa-adtrust-install: run remote configuration for new agents

2020-03-05 14:40:58 +01:00

ipa_winsync_migrate.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipactl.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

kra.py

Re-organize HSM validation to be more consistent/less duplication

2024-07-12 13:53:25 -04:00

krainstance.py

Remove migration from mod_nss to mod_ssl

2025-02-26 16:29:05 +01:00

krbinstance.py

Replace REST with PKI python API for cert and LWCA

2025-11-19 16:50:37 -05:00

ldapupdate.py

Add config option for RSA key size for HTTP, DS, PKINIT, RA certs

2025-11-19 16:50:37 -05:00

odsexporterinstance.py

odsexporterinstance: use late binding for UID/GID resolution

2020-12-22 14:05:13 +02:00

opendnssecinstance.py

Clean up more files and directories created by the installer(s)

2024-06-26 07:40:54 +02:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

pylint: do not use return at the end of flow

2025-05-06 13:48:35 +02:00

schemaupdate.py

Unify access to FQDN

2020-10-26 17:11:19 +11:00

service.py

Don't require certificates to have unique ipaCertSubject

2025-03-21 13:26:39 -04:00

sysupgrade.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

upgradeinstance.py

GetEntryFromLDIF: handle DNs case-insensitive

2025-09-18 13:29:32 +05:30