freeipa/ipaserver
Christian Heimes 3c354e74f3 Verify external CA's basic constraint pathlen
IPA no verifies that intermediate certs of external CAs have a basic
constraint path len of at least 1 and increasing.

Fixes: https://pagure.io/freeipa/issue/7877
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2019-04-04 10:05:10 +02:00
..
advise Add install/remove package helpers to advise 2018-12-11 13:46:52 +01:00
dnssec Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
install Verify external CA's basic constraint pathlen 2019-04-04 10:05:10 +02:00
plugins oddjob: allow to pass options to trust-fetch-domains 2019-04-01 13:27:41 +02:00
secrets Py3: Replace six.moves imports 2018-10-05 12:06:19 +02:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc_common.py Py3: Replace six.text_type with str 2018-09-27 16:11:18 +02:00
dcerpc.py Use new LDAPClient constructors 2019-02-05 08:39:13 -05:00
dns_data_management.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
masters.py Add hidden replica feature 2019-03-28 17:57:58 +01:00
p11helper.py pylint 2.2: Fix unnecessary pass statement 2018-11-26 16:54:43 +01:00
rpcserver.py Py3: Replace six.moves imports 2018-10-05 12:06:19 +02:00
servroles.py Improve config-show to show hidden servers 2019-03-28 17:57:58 +01:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Disable dependency on dogtag-pki PyPI package 2019-02-12 11:14:06 +01:00
topology.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00