Rob Crittenden fa6181293a Use TLS for the cert-find operation ...

The goal is to avoid using HTTP where possible and use TLS everywhere.
This provides not only privacy protection but also integrity protection.
We should consider any network except localhost as untrusted.

Switch from using urllib.request to dogtag.https_request.

https://pagure.io/freeipa/issue/7027

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>

2017-09-18 11:44:08 +02:00

..

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

aci.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

automember.py

allow 'value' output param in commands without primary key

2016-07-20 13:57:01 +02:00

automount.py

Reworked the renaming mechanism

2017-03-27 19:08:26 +02:00

baseldap.py

py3: remove Exception.message appearances

2017-08-29 12:55:25 +02:00

baseuser.py

Create a Certificate parameter

2017-07-27 10:28:58 +02:00

batch.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

ca.py

x509: Make certificates represented as objects

2017-07-27 10:28:58 +02:00

caacl.py

Conditionally import pyhbac

2017-04-03 13:08:52 +02:00

cert.py

cert: fix wrong assumption of cert-show result type

2017-08-30 12:44:46 +02:00

certmap.py

Create a Certificate parameter

2017-07-27 10:28:58 +02:00

certprofile.py

Reuse self.api when executing ca_enabled_check

2017-01-11 15:26:20 +01:00

config.py

*config-show: Do not show empty roles/attributes

2017-07-04 14:42:43 +02:00

delegation.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

dns.py

pylint: Iterate through dictionaries

2017-09-08 15:42:07 +02:00

dnsserver.py

dnsserver.py: dnsserver-find no longer returns internal server error

2017-06-15 13:51:06 +02:00

dogtag.py

Use TLS for the cert-find operation

2017-09-18 11:44:08 +02:00

domainlevel.py

Check for conflict entries before raising domain level

2016-12-13 12:25:07 +01:00

group.py

Reworked the renaming mechanism

2017-03-27 19:08:26 +02:00

hbac.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

hbacrule.py

Allow renaming of the HBAC rule objects

2017-03-27 19:08:26 +02:00

hbacsvc.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

hbacsvcgroup.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

hbactest.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

host.py

Unify storing certificates in LDAP

2017-08-25 09:40:15 +02:00

hostgroup.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

idrange.py

fix minor spelling mistakes

2017-05-19 09:52:46 +02:00

idviews.py

Changing idoverrideuser-* to treat objectClass case insensitively

2017-09-12 18:00:03 +02:00

internal.py

WebUI: Add hyphenate versions of Host(Role) Based strings

2017-08-22 10:38:10 +02:00

join.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

krbtpolicy.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

ldap2.py

ldap2: don't use decode() on str instance

2017-09-14 14:06:09 +02:00

location.py

DNS Location: add list of roles and DNS servers to location-show

2016-06-17 18:05:03 +02:00

migration.py

py3: remove relative import

2017-08-29 12:55:25 +02:00

misc.py

Make env and plugins commands local again

2016-12-02 13:00:06 +01:00

netgroup.py

netgroup: avoid extraneous LDAP search when retrieving primary key from DN

2016-09-09 16:27:53 +02:00

otp.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

otpconfig.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

otptoken.py

Reworked the renaming mechanism

2017-03-27 19:08:26 +02:00

passwd.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

permission.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

ping.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

pkinit.py

pkinit: don't fail when no pkinit servers found

2017-09-12 15:59:20 +02:00

privilege.py

Reworked the renaming mechanism

2017-03-27 19:08:26 +02:00

pwpolicy.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

rabase.py

rabase.get_certificate: make serial number arg mandatory

2017-03-07 13:24:16 +01:00

radiusproxy.py

Reworked the renaming mechanism

2017-03-27 19:08:26 +02:00

realmdomains.py

ipautil: remove get_domain_name()

2016-11-29 14:50:51 +01:00

role.py

Reworked the renaming mechanism

2017-03-27 19:08:26 +02:00

schema.py

pylint: make unsupported-assignment-operation check local

2017-09-08 15:42:07 +02:00

selfservice.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

selinuxusermap.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

server.py

Uninstall: fix BytesWarning exception

2017-08-25 09:42:51 +02:00

serverrole.py

Fix minor typos

2016-06-16 08:47:20 +02:00

serverroles.py

Fix ipa config-mod --ca-renewal-master

2017-09-05 14:13:46 +02:00

service.py

Unify storing certificates in LDAP

2017-08-25 09:40:15 +02:00

servicedelegation.py

Reworked the renaming mechanism

2017-03-27 19:08:26 +02:00

session.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

stageuser.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

sudo.py

ipalib: move server-side plugins to ipaserver

2016-06-03 09:00:34 +02:00

sudocmd.py

sudocmd: fix unsupported assignment

2017-09-08 15:42:07 +02:00

sudocmdgroup.py

remove trailing newlines form python modules

2016-10-12 10:38:52 +02:00

sudorule.py

Allow renaming of the sudorule objects

2017-03-27 19:08:26 +02:00

topology.py

Fix regexp patterns in parameters to not enforce length

2016-09-20 17:35:28 +02:00

trust.py

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

user.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

vault.py

Refactor the role/attribute member reporting code

2017-05-26 16:11:40 +02:00

virtual.py

logging: remove object-specific loggers

2017-07-14 15:55:59 +02:00

whoami.py

whoami.py: Type error when running tests

2017-07-07 14:44:42 +02:00

xmlserver.py

Added new authentication method

2016-08-17 16:55:49 +02:00