Fraser Tweedale dfbdb53238 cert-request: match names against principal aliases ...

Currently we do not check Kerberos principal aliases when validating
a CSR.  Enhance cert-request to accept the following scenarios:

- for hosts and services: CN and SAN dnsNames match a principal
  alias (realm and service name must be same as nominated principal)

- for all principal types: UPN or KRB5PrincipalName othername match
  any principal alias.

Fixes: https://fedorahosted.org/freeipa/ticket/6295
Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
Reviewed-By: Milan Kubik <mkubik@redhat.com>

2016-12-06 16:13:45 +01:00

..

man

Build: remove incorrect use of MAINTAINERCLEANFILES

2016-11-16 09:12:07 +01:00

pytest_plugins

Tests: Providing trust tests with tree root domain

2016-11-15 13:34:38 +01:00

test_cmdline

test_ipagetkeytab: use system-wide IPA CA cert location in tests

2016-11-09 16:39:39 +01:00

test_install

ipaldap: merge IPAdmin to LDAPClient

2016-11-07 11:34:03 +01:00

test_integration

Test: basic kerberos over http functionality

2016-11-30 16:29:18 +01:00

test_ipalib

Fetch correct exception in IPA_CONFDIR test

2016-12-05 11:58:59 +01:00

test_ipapython

Enhance __repr__ method of Principal

2016-11-30 09:40:43 +01:00

test_ipaserver

ipapython: move dnssec, p11helper and secrets to ipaserver

2016-11-29 14:50:51 +01:00

test_pkcs10

pkcs10: use python-cryptography for CSR processing

2016-11-10 10:21:47 +01:00

test_webui

TESTS: Update group type name

2016-11-14 18:08:15 +01:00

test_xmlrpc

cert-request: match names against principal aliases

2016-12-06 16:13:45 +01:00

__init__.py

Make an ipa-tests package

2013-06-17 19:22:50 +02:00

data.py

Fix more bytes/unicode issues

2015-10-22 18:34:46 +02:00

i18n.py

Improve the robustness FreeIPA's i18n module and its tests

2016-11-28 13:58:33 +01:00

ipa-run-tests

Switch ipa-run-tests to pytest

2014-11-21 12:14:44 +01:00

ipa-test-config

Use the print function

2015-09-01 11:42:01 +02:00

ipa-test-task

Use the print function

2015-09-01 11:42:01 +02:00

Makefile.am

Build: fix distribution of static files for web UI

2016-11-09 13:08:32 +01:00

pytest.ini

Add main guards to a couple of Python scripts

2016-11-24 16:35:43 +01:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Adjustments for setup requirements

2016-11-30 13:32:30 +01:00

test_util.py

Fix test_util.test_assert_deepequal test

2016-10-04 14:11:00 +02:00

util.py

Use env var IPA_CONFDIR to get confdir

2016-12-02 15:05:33 +01:00