Christian Heimes 24a5d4d06b Ensure that KDC cert has SAN DNS entry ...

The dns parameter of request_and_wait_for_cert() must be a string of
hostnames.

* Enforce list/tuple type so that API misuse no longer passes silently.
* Add commonNameToSANDefaultImpl to KDCs_PKINIT_Certs profile
* Explicitly pass hostname for service certs

Fixes: https://pagure.io/freeipa/issue/8685
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2021-01-29 13:36:41 -05:00

..

plugins

Ignore database errors when trying to extract ipaCert on upgrade

2021-01-28 09:19:32 +01:00

server

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrust.py

Use api.env.container_sysaccounts

2020-04-28 11:28:29 +02:00

adtrustinstance.py

uninstall: Don't fail on missing /var/lib/samba

2020-08-17 10:46:23 +02:00

bindinstance.py

Don't add 127.0.0.1 to resolv.conf twice

2020-10-08 08:32:08 +02:00

ca.py

Don't restart certmonger after stopping tracking in uninstall

2020-10-19 12:56:22 -04:00

cainstance.py

Revert "Remove test for minimum ACME support and rely on package deps"

2021-01-15 10:07:33 +01:00

certs.py

Ensure that KDC cert has SAN DNS entry

2021-01-29 13:36:41 -05:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

Add user and group wrappers

2020-09-22 09:23:18 -04:00

dns.py

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

dnskeysyncinstance.py

dnskeysyncinstance: use late binding for UID/GID resolution

2020-12-22 14:05:13 +02:00

dogtag.py

Verify pki ini override early

2019-04-10 13:43:23 +02:00

dogtaginstance.py

Improve PKI subsystem detection

2020-12-09 09:54:58 +01:00

dsinstance.py

Skip offline dse.ldif patching by default

2020-10-05 15:02:14 +02:00

httpinstance.py

Clean up entire /run/ipa/ccaches directory not just files

2020-09-23 14:48:29 +02:00

installutils.py

Add support for cgroup v2 to the installer memory checker

2021-01-20 15:59:27 +01:00

ipa_acme_manage.py

ipa-acme-manage: user a cookie created for the communication with dogtag REST endpoints

2020-11-17 18:48:24 +02:00

ipa_backup.py

Always define the path DNSSEC_OPENSSL_CONF

2020-11-30 15:52:19 +01:00

ipa_cacert_manage.py

lint: Make Pylint-2.4 happy again

2020-02-12 18:08:32 +02:00

ipa_cert_fix.py

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

ipa_crlgen_manage.py

CRL generation master: new utility to enable|disable

2019-03-14 09:39:55 +01:00

ipa_kra_install.py

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

ipa_ldap_updater.py

Simplify LDAPUpdater

2020-09-22 09:21:00 -04:00

ipa_otptoken_import.py

Py3: Remove subclassing from object

2018-09-27 11:49:04 +02:00

ipa_pkinit_manage.py

PKINIT: fix ipa-pkinit-manage enable|disable

2018-12-05 11:06:21 +01:00

ipa_replica_install.py

Enable replica install info logging to match ipa-server-install

2018-11-01 13:08:58 +01:00

ipa_restore.py

Add user and group wrappers

2020-09-22 09:23:18 -04:00

ipa_server_certinstall.py

Require an ipa-ca SAN on 3rd party certs if ACME is enabled

2020-11-02 14:01:05 -05:00

ipa_server_install.py

Improve console logging for ipa-server-install

2018-06-20 08:38:03 +02:00

ipa_server_upgrade.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipa_trust_enable_agent.py

ipa-adtrust-install: run remote configuration for new agents

2020-03-05 14:40:58 +01:00

ipa_winsync_migrate.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipactl.py

Create a common place to retrieve facts about an IPA installation

2020-08-06 14:11:27 +02:00

kra.py

named: Allow using of a custom OpenSSL engine for BIND

2020-08-31 09:42:31 +03:00

krainstance.py

Change KRA profiles in certmonger tracking so they can renew

2020-12-01 12:56:03 +01:00

krbinstance.py

Ensure that KDC cert has SAN DNS entry

2021-01-29 13:36:41 -05:00

ldapupdate.py

Remove magic sleep from create_index_task

2020-10-05 15:02:14 +02:00

odsexporterinstance.py

odsexporterinstance: use late binding for UID/GID resolution

2020-12-22 14:05:13 +02:00

opendnssecinstance.py

opendnssecinstance: use late binding for UID/GID resolution

2020-12-22 14:05:13 +02:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

schemaupdate.py

Unify access to FQDN

2020-10-26 17:11:19 +11:00

service.py

service: handle empty list of services to update their state

2020-12-18 13:33:44 +02:00

sysupgrade.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

upgradeinstance.py

Move where the restore state is marked during IPA server upgrade

2020-12-02 14:08:51 +02:00