freeipa/ipaserver/secrets
Simo Sorce d124e307f3 Separate RA cert store from the HTTP cert store
This is in preparation for separating out the user under which the
ipa api framework runs as.

This commit also removes certs.NSS_DIR to avoid confusion and replaces
it where appropriate with the correct NSS DB directory, either the old
HTTPD_ALIAS_DIR ot the RA DB IPA_RADB_DIR. In some cases its use is
removed altogether as it was simply not necessary.

https://fedorahosted.org/freeipa/ticket/5959

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
2017-02-15 07:13:37 +01:00
..
__init__.py ipapython: move dnssec, p11helper and secrets to ipaserver 2016-11-29 14:50:51 +01:00
client.py py3: base64 encoding/decoding returns always bytes don't mix it 2017-02-08 08:32:44 +01:00
common.py py3: custodia: basedn must be unicode 2017-02-10 14:03:04 +01:00
kem.py custodia: kem.set_keys: replace too-broad exception 2017-02-10 14:03:04 +01:00
store.py Separate RA cert store from the HTTP cert store 2017-02-15 07:13:37 +01:00