freeipa/ipaserver/install
Stanislav Laznicka 392f44a38a
mod_ssl: add SSLVerifyDepth for external CA installs
mod_ssl's limiting of client cert verification depth was causing
the replica installs to fail when master had been installed with
external CA since the SSLCACertificateFile was pointing to a file
with more than one certificate. This is caused by the default
SSLVerifyDepth value of 1. We set it to 5 as that should be
just about enough even for possible sub-CAs.

https://pagure.io/freeipa/issue/7530

Reviewed-By: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
2018-05-10 10:03:02 +02:00
..
plugins Add absolute_import future imports 2018-04-20 09:43:37 +02:00
server Enable SPAKE support using krb5.conf.d snippet 2018-04-28 16:35:16 +02:00
__init__.py Remove __all__ specifications in ipaclient and ipaserver.install 2013-09-06 15:42:33 +02:00
adtrust.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
adtrustinstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
bindinstance.py Cleanup and remove more files on uninstall 2018-03-28 21:18:48 +02:00
ca.py install: fix reported external CA configuration 2018-05-02 11:15:49 +02:00
cainstance.py Use single Custodia instance in installers 2018-04-26 21:19:53 +02:00
certs.py Fix certificate retrieval in ipa-replica-prepare for DL0 2018-05-04 16:08:47 -03:00
conncheck.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
custodiainstance.py Require nss with fix for nickname bug 2018-05-04 12:03:43 +02:00
dns.py Warning the user when using a loopback IP as forwarder 2017-11-09 09:24:03 -02:00
dnskeysyncinstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
dogtag.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
dogtaginstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
dsinstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
httpinstance.py mod_ssl: add SSLVerifyDepth for external CA installs 2018-05-10 10:03:02 +02:00
installutils.py Disable message about log in ipa-backup if IPA is not configured 2018-05-03 17:34:45 +02:00
ipa_backup.py Adding GSSPROXY_CONF to be backed up on ipa-backup 2018-04-25 15:53:58 -03:00
ipa_cacert_manage.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_kra_install.py Use single Custodia instance in installers 2018-04-26 21:19:53 +02:00
ipa_ldap_updater.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_otptoken_import.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_pkinit_manage.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_replica_install.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_replica_prepare.py replica_prepare: Remove the correct NSS DB files 2018-01-16 16:36:10 +01:00
ipa_restore.py Revert "Validate the Directory Manager password" 2018-05-07 16:23:04 +02:00
ipa_server_certinstall.py ipa-server-certinstall failing, unknown option realm 2018-04-20 08:51:37 -04:00
ipa_server_install.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_server_upgrade.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
ipa_winsync_migrate.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
kra.py Use single Custodia instance in installers 2018-04-26 21:19:53 +02:00
krainstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
krbinstance.py Enable SPAKE support using krb5.conf.d snippet 2018-04-28 16:35:16 +02:00
ldapupdate.py upgrade: treat duplicate entry when updating as not an error 2018-04-17 08:18:17 +02:00
odsexporterinstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
opendnssecinstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
otpdinstance.py Enable pylint missing-final-newline check 2015-12-23 07:59:22 +01:00
replication.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
schemaupdate.py logging: do not use ipa_log_manager to create module-level loggers 2017-07-14 15:55:59 +02:00
service.py Replace ntpd with chronyd in installation 2018-04-09 11:00:02 -04:00
sysupgrade.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
upgradeinstance.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00