freeipa/ipalib
Christian Heimes 24a5d4d06b Ensure that KDC cert has SAN DNS entry
The dns parameter of request_and_wait_for_cert() must be a string of
hostnames.

* Enforce list/tuple type so that API misuse no longer passes silently.
* Add commonNameToSANDefaultImpl to KDCs_PKINIT_Certs profile
* Explicitly pass hostname for service certs

Fixes: https://pagure.io/freeipa/issue/8685
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
2021-01-29 13:36:41 -05:00
..
install Ensure that KDC cert has SAN DNS entry 2021-01-29 13:36:41 -05:00
__init__.py pylint: Clean up comment 2020-02-12 18:08:32 +02:00
aci.py De-duplicate ACI attributes and permissions 2020-09-14 09:15:59 +03:00
backend.py Fix Pylint 2.0 violations 2018-07-14 12:04:19 +02:00
base.py Py3: Replace six.string_types with str 2018-09-27 16:11:18 +02:00
capabilities.py Replace LooseVersion 2016-11-24 15:46:40 +01:00
cli.py Make tab completion in console more useful 2020-07-07 12:36:10 +02:00
config.py Fix detection logic for api.env.in_tree 2020-05-14 18:16:20 +02:00
constants.py Easier to use ipa_gethostfqdn() 2020-10-26 17:11:19 +11:00
crud.py ipalib, ipaserver: fix incorrect API.register calls in docstrings 2016-05-25 16:06:26 +02:00
dns.py dnsrecord-mod: allow to modify ttl without passing the record 2019-07-01 09:16:21 +02:00
errors.py rpcserver: fix exception handling for FAST armor failure 2020-10-30 19:06:11 +02:00
facts.py Fall back to old server installation detection when needed 2020-08-18 11:11:26 +02:00
frontend.py Add __signature__ to plugins 2020-07-07 12:36:10 +02:00
krb_utils.py Allow login to WebUI using Kerberos aliases/enterprise principals 2017-03-08 15:56:11 +01:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
messages.py Handle missing LWCA certificate or chain 2019-06-18 10:36:24 +10:00
misc.py Add fix for ipa plugins command 2017-02-17 10:22:07 +01:00
output.py Generate same API.txt under Python 2 and 3 2018-02-15 09:41:30 +01:00
parameters.py Allow leading/trailing whitespaces in passwords 2020-12-18 16:47:59 +02:00
pkcs10.py Change FreeIPA references to IPA and Identity Management 2021-01-21 13:51:45 +01:00
plugable.py cli: When parsing options require name/value pairs 2020-08-25 10:31:19 -04:00
request.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
rpc.py Change FreeIPA references to IPA and Identity Management 2021-01-21 13:51:45 +01:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Add helpers for resolve1 and nameservers 2020-09-23 16:44:26 +02:00
sysrestore.py Address legacy pylint issues in sysrestore.py 2020-08-07 16:44:28 -04:00
text.py Create ipasphinx package for Sphinx plugins 2020-04-28 20:03:21 +02:00
util.py Change FreeIPA references to IPA and Identity Management 2021-01-21 13:51:45 +01:00
x509.py Change FreeIPA references to IPA and Identity Management 2021-01-21 13:51:45 +01:00