Stanislav Laznicka 392f44a38a mod_ssl: add SSLVerifyDepth for external CA installs ...

mod_ssl's limiting of client cert verification depth was causing
the replica installs to fail when master had been installed with
external CA since the SSLCACertificateFile was pointing to a file
with more than one certificate. This is caused by the default
SSLVerifyDepth value of 1. We set it to 5 as that should be
just about enough even for possible sub-CAs.

https://pagure.io/freeipa/issue/7530

Reviewed-By: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2018-05-10 10:03:02 +02:00

..

plugins

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

server

Enable SPAKE support using krb5.conf.d snippet

2018-04-28 16:35:16 +02:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrust.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

adtrustinstance.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

bindinstance.py

Cleanup and remove more files on uninstall

2018-03-28 21:18:48 +02:00

ca.py

install: fix reported external CA configuration

2018-05-02 11:15:49 +02:00

cainstance.py

Use single Custodia instance in installers

2018-04-26 21:19:53 +02:00

certs.py

Fix certificate retrieval in ipa-replica-prepare for DL0

2018-05-04 16:08:47 -03:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

Require nss with fix for nickname bug

2018-05-04 12:03:43 +02:00

dns.py

Warning the user when using a loopback IP as forwarder

2017-11-09 09:24:03 -02:00

dnskeysyncinstance.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

dogtag.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

dogtaginstance.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

dsinstance.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

httpinstance.py

mod_ssl: add SSLVerifyDepth for external CA installs

2018-05-10 10:03:02 +02:00

installutils.py

Disable message about log in ipa-backup if IPA is not configured

2018-05-03 17:34:45 +02:00

ipa_backup.py

Adding GSSPROXY_CONF to be backed up on ipa-backup

2018-04-25 15:53:58 -03:00

ipa_cacert_manage.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

ipa_kra_install.py

Use single Custodia instance in installers

2018-04-26 21:19:53 +02:00

ipa_ldap_updater.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

ipa_otptoken_import.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

ipa_pkinit_manage.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

ipa_replica_install.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

ipa_replica_prepare.py

replica_prepare: Remove the correct NSS DB files

2018-01-16 16:36:10 +01:00

ipa_restore.py

Revert "Validate the Directory Manager password"

2018-05-07 16:23:04 +02:00

ipa_server_certinstall.py

ipa-server-certinstall failing, unknown option realm

2018-04-20 08:51:37 -04:00

ipa_server_install.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

ipa_server_upgrade.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

ipa_winsync_migrate.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

kra.py

Use single Custodia instance in installers

2018-04-26 21:19:53 +02:00

krainstance.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

krbinstance.py

Enable SPAKE support using krb5.conf.d snippet

2018-04-28 16:35:16 +02:00

ldapupdate.py

upgrade: treat duplicate entry when updating as not an error

2018-04-17 08:18:17 +02:00

odsexporterinstance.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

opendnssecinstance.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

schemaupdate.py

logging: do not use ipa_log_manager to create module-level loggers

2017-07-14 15:55:59 +02:00

service.py

Replace ntpd with chronyd in installation

2018-04-09 11:00:02 -04:00

sysupgrade.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

upgradeinstance.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00