freeipa

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00

Files

Fraser Tweedale b720aa94e9 Update lightweight CA serial after renewal

For CA replicas to pick up renewed lightweight CA signing
certificates, the authoritySerial attribute can be updated with the
new serial number.

Update the renew_ca_cert script, which is executed by Certmonger
after writing a renewed CA certificate to the NSSDB, to update the
authoritySerial attribute if the certificate belongs to a
lightweight CA.

Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Jan Cholasta <jcholast@redhat.com>

2016-06-29 08:52:29 +02:00

Makefile.am

Move freeipa certmonger helpers to libexecdir.

2016-02-26 08:29:44 +01:00

README

Configure certmonger to execute restart scripts on renewal.

2012-04-10 01:08:41 -04:00

renew_ca_cert

Update lightweight CA serial after renewal

2016-06-29 08:52:29 +02:00

renew_ra_cert

restart scripts: bootstrap api with in_server=True

2016-06-21 08:30:35 +02:00

renew_ra_cert_pre

cert renewal: make renewal of ipaCert atomic

2015-11-19 13:06:12 +01:00

restart_dirsrv

restart scripts: bootstrap api with in_server=True

2016-06-21 08:30:35 +02:00

restart_httpd

Modernize 'except' clauses

2015-08-12 18:17:23 +02:00

stop_pkicad

restart scripts: bootstrap api with in_server=True

2016-06-21 08:30:35 +02:00

README

This directory contains scripts to be used by the command (-C) option
of certmonger to restart services when the certificates are renewed.