freeipa/ipaserver
Rob Crittenden e4470f8165 User-defined certificate subjects
Let the user, upon installation, set the certificate subject base
for the dogtag CA. Certificate requests will automatically be given
this subject base, regardless of what is in the CSR.

The selfsign plugin does not currently support this dynamic name
re-assignment and will reject any incoming requests that don't
conform to the subject base.

The certificate subject base is stored in cn=ipaconfig but it does
NOT dynamically update the configuration, for dogtag at least. The
file /var/lib/pki-ca/profiles/ca/caIPAserviceCert.cfg would need to
be updated and pki-cad restarted.
2010-01-20 17:24:01 -05:00
..
install User-defined certificate subjects 2010-01-20 17:24:01 -05:00
plugins User-defined certificate subjects 2010-01-20 17:24:01 -05:00
__init__.py ipa-server-install now renders UI assets 2009-11-04 03:52:30 -07:00
conn.py Renamed ipa_server/ to ipaserver/ and tests/test_ipa_server/ to tests/test_ipaserver 2009-01-04 18:44:16 -07:00
ipaldap.py Don't pass non-existent arguments to _handle_errors() 2009-05-19 09:48:35 -04:00
ipautil.py Clean up some problems discovered with pylint and pychecker 2009-08-12 13:18:15 -04:00
rpcserver.py Remove some left-over debugging statements 2009-12-16 19:26:23 -07:00
servercore.py Clean up some problems discovered with pylint and pychecker 2009-08-12 13:18:15 -04:00