Christian Heimes 24a5d4d06b Ensure that KDC cert has SAN DNS entry ...

The dns parameter of request_and_wait_for_cert() must be a string of
hostnames.

* Enforce list/tuple type so that API misuse no longer passes silently.
* Add commonNameToSANDefaultImpl to KDCs_PKINIT_Certs profile
* Explicitly pass hostname for service certs

Fixes: https://pagure.io/freeipa/issue/8685
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2021-01-29 13:36:41 -05:00

..

advise

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

dnssec

Change mkdir logic in DNSSEC

2020-12-18 20:40:36 +02:00

install

Ensure that KDC cert has SAN DNS entry

2021-01-29 13:36:41 -05:00

plugins

baseldap: allow rejecting unknown objects instead of adding to an external attr

2021-01-26 13:05:27 -05:00

secrets

NSSWrappedCertDB: accept optional symmetric algorithm

2019-09-25 12:42:06 +10:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc_common.py

Py3: Replace six.text_type with str

2018-09-27 16:11:18 +02:00

dcerpc.py

trust-fetch-domains: use custom krb5.conf overlay for all trust operations

2021-01-22 12:21:33 -05:00

dns_data_management.py

Lookup ipa-ca record with NSS

2020-10-10 12:54:06 +02:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

masters.py

Add hidden replica feature

2019-03-28 17:57:58 +01:00

p11helper.py

Grammar: whitespace is a word

2020-06-23 10:16:29 +02:00

rpcserver.py

rpcserver: fix exception handling for FAST armor failure

2020-10-30 19:06:11 +02:00

servroles.py

Use api.env.container_sysaccounts

2020-04-28 11:28:29 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Delay import of psutil to avoid AVC

2020-09-23 14:49:15 +02:00

topology.py

Py3: Remove subclassing from object

2018-09-27 11:49:04 +02:00