Rob Crittenden 42a94e9998 Remove the migration of the RA cert from mod_nss to mod_ssl ...

Originally the RA certificate was stored in the Apache NSS
database so it was available natively to the framework. It
was subsequently moved into PEM files even prior to the
switch from mod_nss to mod_ssl.

This code was introduced with 4.5.0 and was last seen in Fedora
in 27 in 2017. We don't support direct in-place upgrades from
such an old version so we should be safe from bricking a user's
installation.

Fixes: https://pagure.io/freeipa/issue/9739

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

2025-02-26 16:29:05 +01:00

..

plugins

Remove the migration of the RA cert from mod_nss to mod_ssl

2025-02-26 16:29:05 +01:00

server

Remove migration from mod_nss to mod_ssl

2025-02-26 16:29:05 +01:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

acmeinstance.py

Don't rely on removing the CA to uninstall the ACME depoyment

2024-10-03 13:17:53 -04:00

adtrust.py

adtrust install: define constants for rid bases

2021-11-02 10:11:28 +01:00

adtrustinstance.py

Make name of nobody group configurable and use nogroup on Debian

2025-02-26 16:14:28 +01:00

bindinstance.py

dns: only disable unbound when DoT is enabled

2025-02-12 19:47:57 +01:00

ca.py

Pass all pkiuser groups as suplementary when validating an HSM

2024-12-03 14:15:58 -05:00

cainstance.py

Remove migration from mod_nss to mod_ssl

2025-02-26 16:29:05 +01:00

certs.py

Add token support to installer certificate handling

2024-05-16 08:46:32 -04:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

Clean up more files and directories created by the installer(s)

2024-06-26 07:40:54 +02:00

dns.py

dns: only disable unbound when DoT is enabled

2025-02-12 19:47:57 +01:00

dnskeysyncinstance.py

Clean up more files and directories created by the installer(s)

2024-06-26 07:40:54 +02:00

dogtag.py

Verify pki ini override early

2019-04-10 13:43:23 +02:00

dogtaginstance.py

Suppress spurious failure messages when uninstalling ACME

2025-01-31 13:58:32 -05:00

dsinstance.py

Replica CA installation: ignore time skew during initial replication

2024-07-31 16:23:42 -04:00

httpinstance.py

Remove migration from mod_nss to mod_ssl

2025-02-26 16:29:05 +01:00

installutils.py

pylint: Fix used-before-assignment

2023-01-10 08:30:58 +01:00

ipa_acme_manage.py

Unify use of option parsers

2025-01-15 12:18:46 +01:00

ipa_backup.py

Unify use of option parsers

2025-01-15 12:18:46 +01:00

ipa_cacert_manage.py

Unify use of option parsers

2025-01-15 12:18:46 +01:00

ipa_cert_fix.py

Compatibility fix for PyCA cryptography 42.0.0

2024-01-24 14:54:24 +01:00

ipa_crlgen_manage.py

CRL generation master: new utility to enable|disable

2019-03-14 09:39:55 +01:00

ipa_idrange_fix.py

Add ipa-idrange-fix

2024-08-29 11:04:56 -04:00

ipa_kra_install.py

Unify use of option parsers

2025-01-15 12:18:46 +01:00

ipa_ldap_updater.py

Remove -s option from ipa-ldap-updater usage

2021-05-20 14:45:27 -04:00

ipa_migrate_constants.py

ipa-migrate - do not migrate tombstone entries, ignore MidairCollisions, and krbpwdpolicyreference

2025-02-12 14:01:41 -05:00

ipa_migrate.py

ipa-migrate - do not migrate tombstone entries, ignore MidairCollisions, and krbpwdpolicyreference

2025-02-12 14:01:41 -05:00

ipa_otptoken_import.py

pyca: adapt import paths for TripleDES cipher

2024-12-04 09:50:44 +01:00

ipa_pkinit_manage.py

Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server

2021-06-17 17:28:48 -04:00

ipa_replica_install.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

ipa_restore.py

ipa tools: remove sensitive material from the commandline

2025-01-15 12:18:46 +01:00

ipa_server_certinstall.py

ipa tools: remove sensitive material from the commandline

2025-01-15 12:18:46 +01:00

ipa_server_install.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

ipa_server_upgrade.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipa_subids.py

pylint: Fix arguments-renamed

2022-03-11 13:37:08 -05:00

ipa_trust_enable_agent.py

ipa-adtrust-install: run remote configuration for new agents

2020-03-05 14:40:58 +01:00

ipa_winsync_migrate.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipactl.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

kra.py

Re-organize HSM validation to be more consistent/less duplication

2024-07-12 13:53:25 -04:00

krainstance.py

Remove migration from mod_nss to mod_ssl

2025-02-26 16:29:05 +01:00

krbinstance.py

Clean up more files and directories created by the installer(s)

2024-06-26 07:40:54 +02:00

ldapupdate.py

pylint: remove useless suppression

2023-01-10 08:30:58 +01:00

odsexporterinstance.py

odsexporterinstance: use late binding for UID/GID resolution

2020-12-22 14:05:13 +02:00

opendnssecinstance.py

Clean up more files and directories created by the installer(s)

2024-06-26 07:40:54 +02:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

check_repl_update: in progress is a boolean

2022-08-16 08:39:06 +02:00

schemaupdate.py

Unify access to FQDN

2020-10-26 17:11:19 +11:00

service.py

Apply certmonger_timeout to start_tracking and request_cert

2025-01-27 08:31:49 +01:00

sysupgrade.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

upgradeinstance.py

Use get_replication_plugin_name in LDAP updater

2021-06-21 10:58:02 +02:00