freeipa/ipaserver/plugins
Rob Crittenden 1d635090cb Use the certificate subject base in IPA when requesting certs in certmonger.
When using the dogtag CA we can control what the subject of an issued
certificate is regardless of what is in the CSR, we just use the CN value.
The selfsign CA does not have this capability. The subject format must
match the configured format or certificate requests are rejected.

The default format is CN=%s,O=IPA. certmonger by default issues requests
with just CN so all requests would fail if using the selfsign CA.

This subject base is stored in cn=ipaconfig so we can just fetch that
value in the enrollment process and pass it to certmonger to request
the right thing.

Note that this also fixes ipa-join to work with the new argument passing
mechanism.
2010-04-23 04:57:40 -06:00
..
__init__.py Remove deprecated comment on plugin naming conventions 2009-09-14 09:46:35 -04:00
dogtag.py Remove older MITM fixes to make compatible with dogtag 1.3.3 2010-04-19 10:04:25 -04:00
join.py Use the certificate subject base in IPA when requesting certs in certmonger. 2010-04-23 04:57:40 -06:00
ldap2.py Use ldap2 instead of legacy LDAP code from v1 in installer scripts. 2010-04-19 11:27:10 -04:00
ldapapi.py Fix password setting on python 2.4 systems (it doesn't like None for oldpw) 2009-05-21 22:43:10 -04:00
rabase.py Remove older MITM fixes to make compatible with dogtag 1.3.3 2010-04-19 10:04:25 -04:00
selfsign.py localize doc strings 2010-03-08 21:10:36 -07:00
xmlserver.py Consolidate to single WSGI entry point 2010-03-01 20:21:38 -07:00