Martin Kosek 867f7691e9 Add OCSP and CRL URIs to certificates ...

Modify the default IPA CA certificate profile to include CRL and
OCSP extensions which will add URIs to IPA CRL&OCSP to published
certificates.

Both CRL and OCSP extensions have 2 URIs, one pointing directly to
the IPA CA which published the certificate and one to a new CNAME
ipa-ca.$DOMAIN which was introduced as a general CNAME pointing
to all IPA replicas which have CA configured.

The new CNAME is added either during new IPA server/replica/CA
installation or during upgrade.

https://fedorahosted.org/freeipa/ticket/3074
https://fedorahosted.org/freeipa/ticket/1431

2012-12-07 11:00:17 -05:00

..

man

Fix schema replication from old masters

2012-11-23 12:19:19 +01:00

ipa-adtrust-install

ipa-adtrust-install: allow to reset te NetBIOS domain name

2012-11-08 08:18:14 +01:00

ipa-ca-install

Add OCSP and CRL URIs to certificates

2012-12-07 11:00:17 -05:00

ipa-compat-manage

Use DN objects instead of strings

2012-08-12 16:23:24 -04:00

ipa-compliance

Use DN objects instead of strings

2012-08-12 16:23:24 -04:00

ipa-csreplica-manage

Make ipa-csreplica-manage work with both merged and non-merged DBs

2012-11-23 12:19:20 +01:00

ipa-dns-install

Create reverse zone in unattended mode

2012-10-19 16:19:14 +02:00

ipa-ldap-updater

Framework for admin/install tools, with ipa-ldap-updater

2012-07-22 23:17:56 -04:00

ipa-managed-entries

Use DN objects instead of strings

2012-08-12 16:23:24 -04:00

ipa-nis-manage

Use DN objects instead of strings

2012-08-12 16:23:24 -04:00

ipa-replica-conncheck

Changes to use a single database for dogtag and IPA

2012-11-23 12:19:19 +01:00

ipa-replica-install

Add OCSP and CRL URIs to certificates

2012-12-07 11:00:17 -05:00

ipa-replica-manage

Handle the case where there are no replicas with list-ruv

2012-11-07 10:01:04 +01:00

ipa-replica-prepare

Improve ipa-replica-prepare error message

2012-12-06 08:00:27 +01:00

ipa-server-certinstall

Use DN objects instead of strings

2012-08-12 16:23:24 -04:00

ipa-server-install

Add OCSP and CRL URIs to certificates

2012-12-07 11:00:17 -05:00

ipa-upgradeconfig

Add OCSP and CRL URIs to certificates

2012-12-07 11:00:17 -05:00

ipactl

Only update the list of running services in the installer or ipactl.

2012-12-05 10:44:44 -05:00

Makefile.am

25 Create Tool for Enabling/Disabling Managed Entry Plugins

2011-09-21 09:22:13 +02:00