freeipa

0 Fork 0

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-11-03 12:48:53 -06:00

Files

T

Florence Blanc-Renaud 7ec0cb4ced Cert renewal: update the trust flags for audit cert

When certmonger renews the auditSigningCert for the CA
or the KRA, it has to add the P trust flag to the NSS
database in /etc/pki/pki-tomcat/alias.

If IPA is installed in FIPS mode with an HSM, the
certutil commands must be provided a password file
containing both the internal token password and the
HSM password, and the cert name must be prefixed
with the tokenname (otherwise certutil -M succeeds
but does not update the trust flags).

Fixes: https://pagure.io/freeipa/issue/9705
Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2025-01-03 08:11:16 -05:00

Makefile.am

Generate scripts from templates

2018-08-23 14:49:06 +02:00

README

Configure certmonger to execute restart scripts on renewal.

2012-04-10 01:08:41 -04:00

renew_ca_cert.in

Cert renewal: update the trust flags for audit cert

2025-01-03 08:11:16 -05:00

renew_kdc_cert.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

renew_ra_cert_pre.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

renew_ra_cert.in

Don't create log files from help scripts

2019-09-24 15:23:30 +02:00

restart_dirsrv.in

Don't create log files from help scripts

2019-09-24 15:23:30 +02:00

restart_httpd.in

Replace PYTHONSHEBANG with valid shebang

2019-06-24 09:35:57 +02:00

stop_pkicad.in

Don't create log files from help scripts

2019-09-24 15:23:30 +02:00

README

This directory contains scripts to be used by the command (-C) option
of certmonger to restart services when the certificates are renewed.