freeipa

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00

Files

Pavel Vomacka 566361e63d Turn off OCSP check

The OCSP check was previously turned on but it introduced several
issues. Therefore the check will be turned off by default.

For turning on should be used ipa advise command with correct recipe.
The solution is tracked here: https://pagure.io/freeipa/issue/6982

Fixes: https://pagure.io/freeipa/issue/6981
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>

2017-06-06 13:33:54 +02:00

Makefile.am

server install: fix KDC PKINIT configuration

2017-05-19 12:31:24 +02:00

README

Configure certmonger to execute restart scripts on renewal.

2012-04-10 01:08:41 -04:00

renew_ca_cert

certdb: use custom object for trust flags

2017-05-19 12:31:24 +02:00

renew_kdc_cert

krb5: make sure KDC certificate is readable

2017-05-25 14:25:01 +02:00

renew_ra_cert

renew agent, restart scripts: connect to LDAP after kinit

2017-04-07 18:53:15 +02:00

renew_ra_cert_pre

cert renewal: make renewal of ipaCert atomic

2015-11-19 13:06:12 +01:00

restart_dirsrv

dsinstance: reconnect ldap2 after DS is restarted by certmonger

2017-04-07 18:53:15 +02:00

restart_httpd

Turn off OCSP check

2017-06-06 13:33:54 +02:00

stop_pkicad

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

README

This directory contains scripts to be used by the command (-C) option
of certmonger to restart services when the certificates are renewed.