Florence Blanc-Renaud 8983ce53e3 ipa-kra-install: fix check_host_keys ...

ipa-kra-install on a replica checks that the keys are available before
going further to avoid race condition due to replication. The issue is
that the check_host_keys method expects to find exactly one key for
cn=env/host but 2 may exist: one below cn=custodia and one below
cn=dogtag,cn=custodia.
The fix is to check that at least one key exist (not exactly one key).

https://pagure.io/freeipa/issue/6934

Reviewed-By: Martin Basti <mbasti@redhat.com>

2017-05-09 14:28:13 +02:00

..

advise

scripts, tests: explicitly set confdir in the rest of server code

2017-02-22 08:07:48 +00:00

dnssec

Fix PKCS11 helper

2017-04-12 09:54:10 +02:00

install

upgrade: add missing suffix to http instance

2017-05-05 18:55:41 +02:00

plugins

Refresh Dogtag RestClient.ca_host property

2017-05-02 17:33:25 +02:00

secrets

ipa-kra-install: fix check_host_keys

2017-05-09 14:28:13 +02:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc.py

ipaserver/dcerpc: unify error processing

2017-04-11 14:16:39 +02:00

dns_data_management.py

Fix compatibility with python-dns 1.15.0

2016-10-11 15:45:41 +02:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

p11helper.py

Fix PKCS11 helper

2017-04-12 09:54:10 +02:00

rpcserver.py

kerberos session: use CA cert with full cert chain for obtaining cookie

2017-05-02 13:42:52 +02:00

servroles.py

Introduce "NTP server" role

2016-06-15 13:51:48 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Correct PyPI package dependencies

2017-04-26 12:31:11 +02:00

topology.py

Fix topologysuffix-verify failing connections

2016-06-24 13:32:02 +02:00