Christian Heimes c5fb6c8502 Prepare migration of mod_nss NSSDB to sql format ...

- Refactor CertDB to look up values from its NSSDatabase.
- Add run_modutil() helpers to support sql format. modutil does not
  auto-detect the NSSDB format.
- Add migration helpers to CertDB.
- Add explicit DB format to NSSCertificateDatabase stanza
- Restore SELinux context when migrating NSSDB.
- Add some debugging and sanity checks to httpinstance.

The actual database format is still dbm. Certmonger on Fedora 27 does
neither auto-detect DB format nor support SQL out of the box.

https://pagure.io/freeipa/issue/7354

Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>

2018-02-23 11:04:10 +01:00

..

plugins

mod_ssl migration: fix upload_cacrt.py plugin

2018-02-21 07:57:40 +01:00

server

Enable upgrades from a mod_nss-installed master to mod_ssl

2018-02-21 07:57:40 +01:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrust.py

Correct typo estabilish->establish in the install scripts

2017-07-24 13:41:16 +02:00

adtrustinstance.py

Replace hard-coded paths with path constants

2018-02-08 09:32:12 +01:00

bindinstance.py

Add mocked test for named crypto policy update

2018-02-20 17:01:52 +01:00

ca.py

Add a helpful comment to ca.py:install_check()

2018-01-16 14:15:58 +01:00

cainstance.py

LGTM: Use explicit string concatenation

2018-01-09 07:53:28 +01:00

certs.py

Prepare migration of mod_nss NSSDB to sql format

2018-02-23 11:04:10 +01:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

service: rename import_ca_certs_* to export_*

2018-02-21 07:57:40 +01:00

dns.py

Warning the user when using a loopback IP as forwarder

2017-11-09 09:24:03 -02:00

dnskeysyncinstance.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

dogtag.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

dogtaginstance.py

Move config templates from install/conf to install/share

2018-02-09 09:14:22 +01:00

dsinstance.py

certmonger: Use explicit storage format

2018-02-23 11:04:10 +01:00

httpinstance.py

Prepare migration of mod_nss NSSDB to sql format

2018-02-23 11:04:10 +01:00

installutils.py

Add value in set_directive after a commented-out version

2018-02-21 07:57:40 +01:00

ipa_backup.py

Replace hard-coded paths with path constants

2018-02-08 09:32:12 +01:00

ipa_cacert_manage.py

Update IPA CA issuer DN upon renewal

2018-02-08 13:53:30 +01:00

ipa_kra_install.py

Have all the scripts run in python 3 by default

2018-02-15 18:43:12 +01:00

ipa_ldap_updater.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

ipa_otptoken_import.py

OTP import: support hash names with HMAC- prefix

2017-09-18 11:37:31 +02:00

ipa_pkinit_manage.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

ipa_replica_install.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

ipa_replica_prepare.py

replica_prepare: Remove the correct NSS DB files

2018-01-16 16:36:10 +01:00

ipa_restore.py

Enable and start oddjobd after ipa-restore if it's not running.

2018-02-09 09:44:11 +01:00

ipa_server_certinstall.py

Make ipa-server-certinstall store HTTPD cert in a file

2018-02-21 07:57:40 +01:00

ipa_server_install.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

ipa_server_upgrade.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

ipa_winsync_migrate.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

kra.py

Restart named-pkcs11 after KRA installation

2018-02-08 16:58:13 +01:00

krainstance.py

Enable ephemeral KRA requests

2017-12-15 08:45:38 +01:00

krbinstance.py

certmonger: Use explicit storage format

2018-02-23 11:04:10 +01:00

ldapupdate.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

ntpinstance.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

odsexporterinstance.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

opendnssecinstance.py

Use os.path.isfile() and isdir()

2017-10-20 12:27:19 +02:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

Unified ldap_initialize() function

2018-02-15 18:32:17 +01:00

schemaupdate.py

logging: do not use ipa_log_manager to create module-level loggers

2017-07-14 15:55:59 +02:00

service.py

Prepare migration of mod_nss NSSDB to sql format

2018-02-23 11:04:10 +01:00

sysupgrade.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

upgradeinstance.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00