mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-27 09:21:59 -06:00
b12db92414
Currently server (HTTP / LDAP) certs are created without a Subject Alternative Name extension during server install, replica prepare and host enrolment, a potentially problematic violation of RFC 2818. Add the hostname as a SAN dNSName when these certs are created. (Certmonger adds an appropriate request extension when renewing the certificate, so nothing needs to be done for renewal). Fixes: https://fedorahosted.org/freeipa/ticket/4970 Reviewed-By: Petr Spacek <pspacek@redhat.com> |
||
---|---|---|
.. | ||
advise | ||
install | ||
plugins | ||
__init__.py | ||
dcerpc.py | ||
dns_data_management.py | ||
rpcserver.py | ||
servroles.py | ||
session.py | ||
topology.py |