Rob Crittenden a37e90530f Include the CA basic constraint in CSRs when renewing a CA ...

The CSR generated by `ipa-cacert-manage renew --external-ca` did
not include the CA basic constraint:

  X509v3 Basic Constraints: critical
      CA:TRUE

Add a flag to certmonger::resubmit_request to specify that a
CA is being requested.

Note that this also sets pathlen to -1 which means an unlimited
pathlen. Leave it up to the issuing CA to set this.

https://pagure.io/freeipa/issue/7088

Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>

2017-08-22 11:05:37 +02:00

..

plugins

x509: Make certificates represented as objects

2017-07-27 10:28:58 +02:00

server

replica: fix SetuptoolsVersion comparison

2017-08-03 13:48:12 +02:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrust.py

Correct typo estabilish->establish in the install scripts

2017-07-24 13:41:16 +02:00

adtrustinstance.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

bindinstance.py

py3: fixing zonemgr_callback

2017-07-27 16:48:49 +02:00

ca.py

ca: TypeError fix

2017-07-27 16:53:00 +02:00

cainstance.py

Pass ipa-ca-agent credentials as PEM files

2017-08-18 11:32:34 +02:00

certs.py

certs: write and read bytes as such

2017-08-02 16:15:13 +02:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

Misc Python 3 fixes for ipaserver.secrets

2017-08-11 13:47:35 +02:00

dns.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

dnskeysyncinstance.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

dogtag.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

dogtaginstance.py

python3: port certmonger requests script

2017-08-22 10:53:39 +02:00

dsinstance.py

x509: Make certificates represented as objects

2017-07-27 10:28:58 +02:00

httpinstance.py

x509: Make certificates represented as objects

2017-07-27 10:28:58 +02:00

installutils.py

x509: Make certificates represented as objects

2017-07-27 10:28:58 +02:00

ipa_backup.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

ipa_cacert_manage.py

Include the CA basic constraint in CSRs when renewing a CA

2017-08-22 11:05:37 +02:00

ipa_kra_install.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

ipa_ldap_updater.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

ipa_otptoken_import.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

ipa_pkinit_manage.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

ipa_replica_install.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

ipa_replica_prepare.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

ipa_restore.py

logging: do not reference loggers in arguments and attributes

2017-07-14 15:55:59 +02:00

ipa_server_certinstall.py

x509: Make certificates represented as objects

2017-07-27 10:28:58 +02:00

ipa_server_install.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

ipa_server_upgrade.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

ipa_winsync_migrate.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

kra.py

kra: promote: Get ticket before calling custodia

2017-06-15 10:10:27 +02:00

krainstance.py

krainstance: fix writing str to file

2017-07-27 16:51:09 +02:00

krbinstance.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

ldapupdate.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

ntpinstance.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

odsexporterinstance.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

opendnssecinstance.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

schemaupdate.py

logging: do not use ipa_log_manager to create module-level loggers

2017-07-14 15:55:59 +02:00

service.py

x509: Make certificates represented as objects

2017-07-27 10:28:58 +02:00

sysupgrade.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

upgradeinstance.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00