Petr Spacek 21e6cc6863 DNSSEC: Make sure that current key state in LDAP matches key state in BIND ...

We have to explicitly specify "none" value to prevent dnssec-keyfromlabel
utility from using current time for keys without "publish" and "activate"
timestamps.

Previously this lead to situation where key was in (intermediate) state
"generated" in OpenDNSSEC but BIND started to use this key for signing.

https://fedorahosted.org/freeipa/ticket/5348

Reviewed-By: Martin Basti <mbasti@redhat.com>

2016-01-07 14:13:23 +01:00

..

__init__.py

DNSSEC: add ipa dnssec daemons

2014-10-21 12:23:03 +02:00

abshsm.py

Use Python3-compatible dict method names

2015-09-01 11:42:01 +02:00

bindmgr.py

DNSSEC: Make sure that current key state in LDAP matches key state in BIND

2016-01-07 14:13:23 +01:00

keysyncer.py

Remove unused imports

2015-12-23 07:59:22 +01:00

ldapkeydb.py

Remove unused imports

2015-12-23 07:59:22 +01:00

localhsm.py

Remove unused imports

2015-12-23 07:59:22 +01:00

odsmgr.py

Remove unused imports

2015-12-23 07:59:22 +01:00

syncrepl.py

Remove unused imports

2015-12-23 07:59:22 +01:00

temp.py

ipapython: Fix incorrect python shebangs

2015-01-26 13:03:24 +01:00