Jan Cholasta ce9eefe53b renew agent: respect CA renewal master setting ...

Do not bypass the renewal master check when a non-virtual profile is used
in dogtag-ipa-ca-renew-agent-submit.

This fixes dogtag-ipa-ca-renew-agent not respecting the CA renewal master
setting for certificates tracked with a real profile. (Note that there
currently aren't any such certificates tracked by us.)

Request the RA certificate using dogtag-submit rather than
dogtag-ipa-ca-renew-agent-submit as the CA renewal master setting is not
available so early in the install process.

https://pagure.io/freeipa/issue/5799

Reviewed-By: David Kupka <dkupka@redhat.com>
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>

2017-05-15 12:14:28 +02:00

..

plugins

upgrade: adtrust update_tdo_gidnumber plugin must check if adtrust is installed

2017-04-24 12:51:37 +02:00

server

Turn on NSSOCSP check in mod_nss conf

2017-05-10 09:08:34 +02:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrust.py

Remove surplus 'the' in output of ipa-adtrust-install

2017-04-11 13:06:13 +02:00

adtrustinstance.py

adtrust: make sure that runtime hostname result is consistent with the configuration

2017-03-30 13:17:21 +02:00

bindinstance.py

py3: create DNS zonefile: use textual mode

2017-02-10 14:03:04 +01:00

ca.py

Fix CA-less to CA-full upgrade

2017-04-12 16:21:46 +02:00

cainstance.py

renew agent: respect CA renewal master setting

2017-05-15 12:14:28 +02:00

certs.py

Fix CA-less to CA-full upgrade

2017-04-12 16:21:46 +02:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

Make sure remote hosts have our keys

2017-05-03 16:37:21 +02:00

dns.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

dnskeysyncinstance.py

Fix PKCS11 helper

2017-04-12 09:54:10 +02:00

dogtag.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

dogtaginstance.py

Fix wrong message on Dogtag instances stop

2017-05-05 18:50:43 +02:00

dsinstance.py

Move the compat plugin setup at the end of install

2017-04-24 17:11:51 +02:00

httpinstance.py

Turn on NSSOCSP check in mod_nss conf

2017-05-10 09:08:34 +02:00

installutils.py

Create system users for FreeIPA services during package installation

2017-04-11 17:51:49 +02:00

ipa_backup.py

Stop requesting anonymous keytab and purge all references of it

2017-04-28 08:38:12 +00:00

ipa_cacert_manage.py

scripts, tests: explicitly set confdir in the rest of server code

2017-02-22 08:07:48 +00:00

ipa_kra_install.py

kra install: update installation failure message

2017-05-03 16:32:05 +02:00

ipa_ldap_updater.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

ipa_otptoken_import.py

Finish port to PyCA cryptography

2017-03-01 12:51:50 +01:00

ipa_replica_install.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

ipa_replica_prepare.py

Fix RA cert import during DL0 replication

2017-04-19 12:36:01 +00:00

ipa_restore.py

restore: restart/reload gssproxy after restore

2017-04-28 14:56:02 +02:00

ipa_server_certinstall.py

scripts, tests: explicitly set confdir in the rest of server code

2017-02-22 08:07:48 +00:00

ipa_server_install.py

install: re-introduce option groups

2017-03-13 10:12:40 +01:00

ipa_server_upgrade.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

ipa_winsync_migrate.py

Set explicit confdir option for global contexts

2016-12-02 09:14:35 +01:00

kra.py

Don't allow standalone KRA uninstalls

2017-03-13 16:27:23 +01:00

krainstance.py

Add pki_pin only when needed

2017-04-05 10:12:53 +02:00

krbinstance.py

ipa-server-install with external CA: fix pkinit cert issuance

2017-05-03 16:29:01 +02:00

ldapupdate.py

py3: ldapupdate: fix logging str(bytes) issue

2017-02-08 18:09:49 +01:00

ntpinstance.py

installer: Stop adding distro-specific NTP servers into ntp.conf

2017-01-05 10:45:30 +01:00

odsexporterinstance.py

services: replace admin_conn with api.Backend.ldap2

2016-11-22 16:17:27 +01:00

opendnssecinstance.py

Fix PKCS11 helper

2017-04-12 09:54:10 +02:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

Make wait_for_entry raise exceptions

2017-03-15 16:39:39 +01:00

schemaupdate.py

Remove unused variables in the code

2016-09-27 13:35:58 +02:00

service.py

installer service: fix typo in service entry

2017-05-05 18:55:41 +02:00

sysupgrade.py

ipapython: move certmonger and sysrestore to ipalib.install

2016-11-29 14:50:51 +01:00

upgradeinstance.py

installer: update time estimates

2017-03-10 15:46:34 +01:00