Alexander Scheel a087d82e78 Specify cert_paths when calling PKIConnection ... PKIConnection now defaults to specifying verify=True. We've introduced a new parameter, cert_paths, to specify additional paths (directories or files) to load as certificates. Specify the IPA CA certificate file so we can guarantee connections succeed and validate the peer's certificate. Point to IPA CA certificate during pkispawn Bump pki_version to 10.9.0-0.4 (aka -b2) Fixes: https://pagure.io/freeipa/issue/8379 Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1849155 Related: https://github.com/dogtagpki/pki/pull/443 Related: https://bugzilla.redhat.com/show_bug.cgi?id=1426572 Signed-off-by: Alexander Scheel <ascheel@redhat.com> Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Christian Heimes <cheimes@redhat.com>		2020-07-08 11:50:37 +02:00
..
plugins	Terminology improvements: use block list	2020-06-23 10:16:29 +02:00
server	Grammar: whitespace is a word	2020-06-23 10:16:29 +02:00
__init__.py	Remove __all__ specifications in ipaclient and ipaserver.install	2013-09-06 15:42:33 +02:00
adtrust.py	Use api.env.container_sysaccounts	2020-04-28 11:28:29 +02:00
adtrustinstance.py	Use api.env.container_sysaccounts	2020-04-28 11:28:29 +02:00
bindinstance.py	Overhaul bind upgrade process	2020-06-10 16:07:07 +02:00
ca.py	move MSCSTemplate classes to ipalib	2019-07-17 17:58:58 +03:00
cainstance.py	Specify cert_paths when calling PKIConnection	2020-07-08 11:50:37 +02:00
certs.py	removed unused function export_pem_p12	2019-12-17 09:18:37 +01:00
conncheck.py	install: introduce installer class hierarchy	2016-11-11 12:17:25 +01:00
custodiainstance.py	ipaserver.install.installutils: move commonly used utils to ipapython.ipautil	2019-06-29 11:00:28 +03:00
dns.py	Check for freeipa-server-dns package early	2020-05-15 14:24:00 +02:00
dnskeysyncinstance.py	ipaserver.install.installutils: move commonly used utils to ipapython.ipautil	2019-06-29 11:00:28 +03:00
dogtag.py	Verify pki ini override early	2019-04-10 13:43:23 +02:00
dogtaginstance.py	Specify cert_paths when calling PKIConnection	2020-07-08 11:50:37 +02:00
dsinstance.py	Fix E714 test for object identity should be 'is not'	2020-05-05 10:42:46 +02:00
httpinstance.py	httpinstance: retry request without ipa-ca.$DOMAIN dnsName on failure	2020-06-10 22:27:26 +10:00
installutils.py	ipaserver.install.installutils: move commonly used utils to ipapython.ipautil	2019-06-29 11:00:28 +03:00
ipa_backup.py	ipa-client-install: use sshd drop-in configuration	2020-06-23 11:11:46 +02:00
ipa_cacert_manage.py	lint: Make Pylint-2.4 happy again	2020-02-12 18:08:32 +02:00
ipa_cert_fix.py	avoid realm_to_serverid deprecation warning	2019-05-29 12:49:27 +10:00
ipa_crlgen_manage.py	CRL generation master: new utility to enable|disable	2019-03-14 09:39:55 +01:00
ipa_kra_install.py	Fix E722 do not use bare 'except'	2020-05-05 10:42:46 +02:00
ipa_ldap_updater.py	Add absolute_import future imports	2018-04-20 09:43:37 +02:00
ipa_otptoken_import.py	Py3: Remove subclassing from object	2018-09-27 11:49:04 +02:00
ipa_pkinit_manage.py	PKINIT: fix ipa-pkinit-manage enable|disable	2018-12-05 11:06:21 +01:00
ipa_replica_install.py	Enable replica install info logging to match ipa-server-install	2018-11-01 13:08:58 +01:00
ipa_restore.py	ipa-restore: restart services at the end	2020-03-13 15:30:09 +01:00
ipa_server_certinstall.py	Move realm_to_serverid/ldap_uri to ipaldap	2019-02-05 08:39:13 -05:00
ipa_server_install.py	Improve console logging for ipa-server-install	2018-06-20 08:38:03 +02:00
ipa_server_upgrade.py	ipa commands: print 'IPA is not configured' when ipa is not setup	2018-08-23 12:08:45 +02:00
ipa_trust_enable_agent.py	ipa-adtrust-install: run remote configuration for new agents	2020-03-05 14:40:58 +01:00
ipa_winsync_migrate.py	ipa commands: print 'IPA is not configured' when ipa is not setup	2018-08-23 12:08:45 +02:00
ipactl.py	ipa_client_automount.py and ipactl.py: fix codestyle	2019-06-28 10:53:07 +02:00
kra.py	krainstance: set correct issuer DN in uid=ipakra entry	2019-10-17 08:17:46 +02:00
krainstance.py	Secure AJP connector between Dogtag and Apache proxy	2020-03-11 17:41:17 +01:00
krbinstance.py	Move certauth configuration into a server krb5.conf template	2019-09-10 12:33:21 +03:00
ldapupdate.py	Remove unused support for dm_password arg from ldapupdate.connect	2020-06-07 10:21:01 +03:00
odsexporterinstance.py	ipaserver.install.installutils: move commonly used utils to ipapython.ipautil	2019-06-29 11:00:28 +03:00
opendnssecinstance.py	opendnssec2.1 support: move all ods tasks to specific file	2020-03-12 21:48:25 +01:00
otpdinstance.py	Enable pylint missing-final-newline check	2015-12-23 07:59:22 +01:00
replication.py	Use api.env.container_sysaccounts	2020-04-28 11:28:29 +02:00
schemaupdate.py	Remove unused support for dm_password arg from ldapupdate.connect	2020-06-07 10:21:01 +03:00
service.py	Fix E722 do not use bare 'except'	2020-05-05 10:42:46 +02:00
sysupgrade.py	Add absolute_import future imports	2018-04-20 09:43:37 +02:00
upgradeinstance.py	Remove unused support for dm_password arg from ldapupdate.connect	2020-06-07 10:21:01 +03:00