freeipa/ipaserver
Rob Crittenden 7ab1bcb2d3 Re-organize HSM validation to be more consistent/less duplication
hsm_validator() was more or less bolted in place late in the
development cycle in in order to catch some of the more common
problems: bad token name, bad password, etc.

There was a fair bit of duplication and had the side-effect of not
reading in the token password from the --token-password-file option
in some cases.

This patch also re-adds a lost feature where an exception is raised if
both the --token-password and --token-password-file options are passed
in.

This also needs to be enforced on initial server, replica and when
called by ipa-kra-install. Given that each has a unique subject of
options some duplication remains.

Fixes: https://pagure.io/freeipa/issue/9603

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
2024-07-15 10:26:54 -04:00
..
advise The -d option of the ipa-advise command was able to used. 2024-07-11 10:30:59 +02:00
custodia custodia: do not use deprecated jwcrypto wrappers 2024-05-23 15:12:27 -04:00
dnssec pylint: Fix useless-suppression 2022-03-11 13:37:08 -05:00
install Re-organize HSM validation to be more consistent/less duplication 2024-07-15 10:26:54 -04:00
plugins PKINIT certificate: fix renewal on hidden replica 2024-06-26 07:36:53 +02:00
secrets pylint: disable missing-timeout message 2023-01-10 08:30:58 +01:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc_common.py Py3: Replace six.text_type with str 2018-09-27 16:11:18 +02:00
dcerpc.py ipaserver: fix incorrect double negative in exception message 2024-05-06 17:10:18 -04:00
dns_data_management.py Wipe the ipa-ca DNS record when updating system records 2023-02-09 14:24:14 -05:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
masters.py Configure affinity during server installation 2023-09-01 13:13:02 -04:00
p11helper.py Grammar: whitespace is a word 2020-06-23 10:16:29 +02:00
rpcserver.py ipalib: move json formatter to a separate file 2024-05-22 17:06:23 -04:00
servroles.py Use api.env.container_sysaccounts 2020-04-28 11:28:29 +02:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Also drop Custodia client and forwarder 2021-06-16 10:28:17 -04:00
topology.py pylint: Fix consider-using-dict-items 2022-03-11 13:37:08 -05:00
wsgi.py Improve wsgi app loading 2021-04-07 11:43:23 +03:00