freeipa/ipaserver/install
Simo Sorce c565fa1781 Always check peer has keys before connecting
When pulling the DM password we may have the same issues reported in
ticket #6838 for CA keys.
This commit makes sure we always check the peer has keys before any
client operation.

Ticket #6838

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Michal Reznik <mreznik@redhat.com>
2017-07-13 10:04:11 +02:00
..
plugins install: trust IPA CA for PKINIT 2017-05-19 12:31:24 +02:00
server install: do not assume /etc/krb5.conf.d exists 2017-06-28 15:44:51 +02:00
__init__.py Remove __all__ specifications in ipaclient and ipaserver.install 2013-09-06 15:42:33 +02:00
adtrust.py Make a doctext more clear 2017-05-19 16:49:04 +02:00
adtrustinstance.py adtrustinstance: write the conf as a string 2017-06-21 16:34:05 +02:00
bindinstance.py py3: create DNS zonefile: use textual mode 2017-02-10 14:03:04 +01:00
ca.py certdb: add named trust flag constants 2017-05-19 12:31:24 +02:00
cainstance.py {ca,kra}instance: drop redundant URI argument from ad-hoc ldap2 connections 2017-07-04 12:06:33 +02:00
certs.py certs: do not export CA certs in install_pem_from_p12 2017-05-19 12:31:24 +02:00
conncheck.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
custodiainstance.py Always check peer has keys before connecting 2017-07-13 10:04:11 +02:00
dns.py Remove network and broadcast address warnings 2017-06-20 11:29:41 +02:00
dnskeysyncinstance.py py3: softhsm key_id must be bytes 2017-06-01 09:24:24 +02:00
dogtag.py install: introduce installer class hierarchy 2016-11-11 12:17:25 +01:00
dogtaginstance.py ipa-server-install: fix uninstall 2017-05-16 11:44:08 +00:00
dsinstance.py install: trust IPA CA for PKINIT 2017-05-19 12:31:24 +02:00
httpinstance.py Turn off OCSP check 2017-06-06 13:33:54 +02:00
installutils.py CheckedIPAddress: remove match_local param 2017-06-20 11:29:41 +02:00
ipa_backup.py py3: use ConfigParser instead of SafeConfigParser 2017-06-01 09:24:24 +02:00
ipa_cacert_manage.py cacert manage: support PKINIT 2017-05-19 12:31:24 +02:00
ipa_kra_install.py ca, kra install: validate DM password 2017-05-17 12:50:42 +02:00
ipa_ldap_updater.py Set explicit confdir option for global contexts 2016-12-02 09:14:35 +01:00
ipa_otptoken_import.py py3: ipa_otptoken_import: fix calling unicode on bytes 2017-06-28 16:26:50 +02:00
ipa_pkinit_manage.py pkinit manage: introduce ipa-pkinit-manage 2017-06-06 13:27:44 +02:00
ipa_replica_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipa_replica_prepare.py py3: use ConfigParser instead of SafeConfigParser 2017-06-01 09:24:24 +02:00
ipa_restore.py Changed ownership of ldiffile to DS_USER 2017-06-15 10:40:18 +02:00
ipa_server_certinstall.py server certinstall: update KDC master entry 2017-06-06 13:27:44 +02:00
ipa_server_install.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
ipa_server_upgrade.py Set explicit confdir option for global contexts 2016-12-02 09:14:35 +01:00
ipa_winsync_migrate.py Set explicit confdir option for global contexts 2016-12-02 09:14:35 +01:00
kra.py kra: promote: Get ticket before calling custodia 2017-06-15 10:10:27 +02:00
krainstance.py {ca,kra}instance: drop redundant URI argument from ad-hoc ldap2 connections 2017-07-04 12:06:33 +02:00
krbinstance.py install: do not assume /etc/krb5.conf.d exists 2017-06-28 15:44:51 +02:00
ldapupdate.py py3: LDAP updates: use only bytes/raw values 2017-06-01 09:24:24 +02:00
ntpinstance.py installer: Stop adding distro-specific NTP servers into ntp.conf 2017-01-05 10:45:30 +01:00
odsexporterinstance.py services: replace admin_conn with api.Backend.ldap2 2016-11-22 16:17:27 +01:00
opendnssecinstance.py Fix PKCS11 helper 2017-04-12 09:54:10 +02:00
otpdinstance.py Enable pylint missing-final-newline check 2015-12-23 07:59:22 +01:00
replication.py ipa-replica-manage del (dl 0): remove server from defaultServerList 2017-05-19 19:00:48 +02:00
schemaupdate.py py3: fix regression in schemaupdate 2017-06-02 09:55:13 +02:00
service.py only stop/disable simple service if it is installed 2017-05-26 16:15:53 +02:00
sysupgrade.py ipapython: move certmonger and sysrestore to ipalib.install 2016-11-29 14:50:51 +01:00
upgradeinstance.py installer: update time estimates 2017-03-10 15:46:34 +01:00