Aleksandr Sharov ac6eee670d Add a check into ipa-cert-fix tool to avoid updating certs if CA is close to being expired. ...

Fixes: https://pagure.io/freeipa/issue/9760
Signed-off-by: Aleksandr Sharov <asharov@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>

2025-03-25 10:33:06 +01:00

..

plugins

update_dna_shared_config: do not fail when config is not found

2025-03-13 21:22:37 +05:30

server

Remove migration from mod_nss to mod_ssl

2025-02-26 16:29:05 +01:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

acmeinstance.py

Don't rely on removing the CA to uninstall the ACME depoyment

2024-10-03 13:17:53 -04:00

adtrust.py

adtrust install: define constants for rid bases

2021-11-02 10:11:28 +01:00

adtrustinstance.py

Make path of Samba lock directory configurable and use /run/samba on Debian

2025-03-10 19:15:09 +05:30

bindinstance.py

dns: only disable unbound when DoT is enabled

2025-02-12 19:47:57 +01:00

ca.py

Drop python 2 support in ipaserver/install/ca.py

2025-03-10 23:06:28 +05:30

cainstance.py

Remove migration from mod_nss to mod_ssl

2025-02-26 16:29:05 +01:00

certs.py

Don't require certificates to have unique ipaCertSubject

2025-03-21 13:26:39 -04:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

Clean up more files and directories created by the installer(s)

2024-06-26 07:40:54 +02:00

dns.py

dns: don't populate forwarders with DoT forwarders

2025-03-25 12:26:52 +05:30

dnskeysyncinstance.py

Clean up more files and directories created by the installer(s)

2024-06-26 07:40:54 +02:00

dogtag.py

Verify pki ini override early

2019-04-10 13:43:23 +02:00

dogtaginstance.py

Suppress spurious failure messages when uninstalling ACME

2025-01-31 13:58:32 -05:00

dsinstance.py

Replica CA installation: ignore time skew during initial replication

2024-07-31 16:23:42 -04:00

httpinstance.py

Remove migration from mod_nss to mod_ssl

2025-02-26 16:29:05 +01:00

installutils.py

Don't require certificates to have unique ipaCertSubject

2025-03-21 13:26:39 -04:00

ipa_acme_manage.py

Unify use of option parsers

2025-01-15 12:18:46 +01:00

ipa_backup.py

Unify use of option parsers

2025-01-15 12:18:46 +01:00

ipa_cacert_manage.py

Don't require certificates to have unique ipaCertSubject

2025-03-21 13:26:39 -04:00

ipa_cert_fix.py

Add a check into ipa-cert-fix tool to avoid updating certs if CA is close to being expired.

2025-03-25 10:33:06 +01:00

ipa_crlgen_manage.py

CRL generation master: new utility to enable|disable

2019-03-14 09:39:55 +01:00

ipa_idrange_fix.py

Add ipa-idrange-fix

2024-08-29 11:04:56 -04:00

ipa_kra_install.py

Unify use of option parsers

2025-01-15 12:18:46 +01:00

ipa_ldap_updater.py

Remove -s option from ipa-ldap-updater usage

2021-05-20 14:45:27 -04:00

ipa_migrate_constants.py

ipa-migrate - do not migrate tombstone entries, ignore MidairCollisions, and krbpwdpolicyreference

2025-02-12 14:01:41 -05:00

ipa_migrate.py

ipa-migrate - do not migrate tombstone entries, ignore MidairCollisions, and krbpwdpolicyreference

2025-02-12 14:01:41 -05:00

ipa_otptoken_import.py

pyca: adapt import paths for TripleDES cipher

2024-12-04 09:50:44 +01:00

ipa_pkinit_manage.py

Allow PKINIT to be enabled when updating from a pre-PKINIT IPA CA server

2021-06-17 17:28:48 -04:00

ipa_replica_install.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

ipa_restore.py

ipa tools: remove sensitive material from the commandline

2025-01-15 12:18:46 +01:00

ipa_server_certinstall.py

Don't require certificates to have unique ipaCertSubject

2025-03-21 13:26:39 -04:00

ipa_server_install.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

ipa_server_upgrade.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipa_subids.py

config-mod: allow disabling subordinate ID integration

2025-03-13 21:22:37 +05:30

ipa_trust_enable_agent.py

ipa-adtrust-install: run remote configuration for new agents

2020-03-05 14:40:58 +01:00

ipa_winsync_migrate.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipactl.py

pylint: Fix useless-suppression

2022-03-11 13:37:08 -05:00

kra.py

Re-organize HSM validation to be more consistent/less duplication

2024-07-12 13:53:25 -04:00

krainstance.py

Remove migration from mod_nss to mod_ssl

2025-02-26 16:29:05 +01:00

krbinstance.py

Don't require certificates to have unique ipaCertSubject

2025-03-21 13:26:39 -04:00

ldapupdate.py

pylint: remove useless suppression

2023-01-10 08:30:58 +01:00

odsexporterinstance.py

odsexporterinstance: use late binding for UID/GID resolution

2020-12-22 14:05:13 +02:00

opendnssecinstance.py

Clean up more files and directories created by the installer(s)

2024-06-26 07:40:54 +02:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

check_repl_update: in progress is a boolean

2022-08-16 08:39:06 +02:00

schemaupdate.py

Unify access to FQDN

2020-10-26 17:11:19 +11:00

service.py

Don't require certificates to have unique ipaCertSubject

2025-03-21 13:26:39 -04:00

sysupgrade.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

upgradeinstance.py

Use get_replication_plugin_name in LDAP updater

2021-06-21 10:58:02 +02:00