Files
freeipa/ipapython
Christian Heimes 13917ddc55 certdb: validate server cert signature
PR https://github.com/freeipa/freeipa/pull/2554 added the '-e' option for CA
cert validation. Let's also verify signature, key size, and signing algorithm
of server certs. With the '-e' option, the installer and other
tools will catch weak certs early.

Fixes: pagure.io/freeipa/issue/7761
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
2018-11-14 07:57:13 +01:00
..
2018-10-05 12:06:19 +02:00
2018-10-05 12:06:19 +02:00
2018-09-27 16:11:18 +02:00
2018-10-05 12:06:19 +02:00
2015-09-30 10:51:36 +02:00
2018-09-27 11:49:04 +02:00
2018-10-05 12:06:19 +02:00
2016-10-20 18:43:37 +02:00
2018-09-06 17:39:00 +02:00
2018-09-27 11:49:04 +02:00

This is a set of libraries common to IPA clients and servers though mostly
geared currently towards command-line tools.

A brief overview:

config.py - identify the IPA server domain and realm. It uses python-dns to
            try to detect this information first and will fall back to
            /etc/ipa/default.conf if that fails.

ipautil.py - helper functions

entity.py - entity is the main data type. User and Group extend this class
            (but don't add anything currently).

ipavalidate.py - basic data validation routines