Fraser Tweedale b12db92414 Create server and host certs with DNS altname ...

Currently server (HTTP / LDAP) certs are created without a Subject
Alternative Name extension during server install, replica prepare
and host enrolment, a potentially problematic violation of RFC 2818.

Add the hostname as a SAN dNSName when these certs are created.

(Certmonger adds an appropriate request extension when renewing the
certificate, so nothing needs to be done for renewal).

Fixes: https://fedorahosted.org/freeipa/ticket/4970
Reviewed-By: Petr Spacek <pspacek@redhat.com>

2016-07-19 14:18:04 +02:00

..

man

man: Decribe ipa-client-install workaround for broken D-Bus enviroment.

2016-06-09 13:08:46 +02:00

config.c

Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts)

2016-01-27 12:09:02 +01:00

configure.ac

CONFIGURE: Replace obsolete macros

2016-03-08 20:02:27 +01:00

ipa-certupdate

Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts)

2016-01-27 12:09:02 +01:00

ipa-client-automount

Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts)

2016-01-27 12:09:02 +01:00

ipa-client-common.c

Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts)

2016-01-27 12:09:02 +01:00

ipa-client-common.h

Migrate from #ifndef guards to #pragma once

2016-05-29 14:04:45 +02:00

ipa-client-install

Create server and host certs with DNS altname

2016-07-19 14:18:04 +02:00

ipa-getkeytab.c

Increase ipa-getkeytab LDAP timeout to 100sec

2016-06-27 09:33:02 +02:00

ipa-join.c

ipa-rmkeytab, ipa-join: don't fail if init of gettext failed

2016-06-27 12:34:18 +02:00

ipa-rmkeytab.c

ipa-rmkeytab, ipa-join: don't fail if init of gettext failed

2016-06-27 12:34:18 +02:00

Makefile.am

Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts)

2016-01-27 12:09:02 +01:00

version.m4.in

Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts)

2016-01-27 12:09:02 +01:00