Rob Crittenden dea2b8af9c Don't renew non-IPA issued certs in ipa-cert-fix ...

If the Apache, 389-ds or KDC certificate was issued by
a third party there is nothing we can do, regardless of
whether it is expired or not.

Report which certificates will not be renewed so the
admin can manually do do (likely in the event of a
third-party certificate).

https://pagure.io/freeipa/issue/8600

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>

2021-02-18 16:41:03 +01:00

..

plugins

Ignore database errors when trying to extract ipaCert on upgrade

2021-01-28 09:19:32 +01:00

server

Remove the option stop_certmonger from stop_tracking_*

2021-02-15 17:13:53 +02:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrust.py

Use api.env.container_sysaccounts

2020-04-28 11:28:29 +02:00

adtrustinstance.py

uninstall: Don't fail on missing /var/lib/samba

2020-08-17 10:46:23 +02:00

bindinstance.py

Don't add 127.0.0.1 to resolv.conf twice

2020-10-08 08:32:08 +02:00

ca.py

Remove the option stop_certmonger from stop_tracking_*

2021-02-15 17:13:53 +02:00

cainstance.py

Remove the option stop_certmonger from stop_tracking_*

2021-02-15 17:13:53 +02:00

certs.py

Ensure that KDC cert has SAN DNS entry

2021-01-29 13:36:41 -05:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

Add user and group wrappers

2020-09-22 09:23:18 -04:00

dns.py

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

dnskeysyncinstance.py

dnskeysyncinstance: use late binding for UID/GID resolution

2020-12-22 14:05:13 +02:00

dogtag.py

Verify pki ini override early

2019-04-10 13:43:23 +02:00

dogtaginstance.py

Remove the option stop_certmonger from stop_tracking_*

2021-02-15 17:13:53 +02:00

dsinstance.py

Skip offline dse.ldif patching by default

2020-10-05 15:02:14 +02:00

httpinstance.py

Clean up entire /run/ipa/ccaches directory not just files

2020-09-23 14:48:29 +02:00

installutils.py

Provide more detailed logging around memory detection

2021-02-01 10:35:16 -05:00

ipa_acme_manage.py

ipa-acme-manage: user a cookie created for the communication with dogtag REST endpoints

2020-11-17 18:48:24 +02:00

ipa_backup.py

Always define the path DNSSEC_OPENSSL_CONF

2020-11-30 15:52:19 +01:00

ipa_cacert_manage.py

ipa-cacert-manage: add prune option

2021-02-12 14:08:11 -05:00

ipa_cert_fix.py

Don't renew non-IPA issued certs in ipa-cert-fix

2021-02-18 16:41:03 +01:00

ipa_crlgen_manage.py

CRL generation master: new utility to enable|disable

2019-03-14 09:39:55 +01:00

ipa_kra_install.py

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

ipa_ldap_updater.py

Simplify LDAPUpdater

2020-09-22 09:21:00 -04:00

ipa_otptoken_import.py

Py3: Remove subclassing from object

2018-09-27 11:49:04 +02:00

ipa_pkinit_manage.py

PKINIT: fix ipa-pkinit-manage enable|disable

2018-12-05 11:06:21 +01:00

ipa_replica_install.py

Enable replica install info logging to match ipa-server-install

2018-11-01 13:08:58 +01:00

ipa_restore.py

Add user and group wrappers

2020-09-22 09:23:18 -04:00

ipa_server_certinstall.py

Require an ipa-ca SAN on 3rd party certs if ACME is enabled

2020-11-02 14:01:05 -05:00

ipa_server_install.py

Improve console logging for ipa-server-install

2018-06-20 08:38:03 +02:00

ipa_server_upgrade.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipa_trust_enable_agent.py

ipa-adtrust-install: run remote configuration for new agents

2020-03-05 14:40:58 +01:00

ipa_winsync_migrate.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipactl.py

Ensure IPA is running (ideally) before uninstalling the KRA

2021-02-04 01:29:53 +01:00

kra.py

Ensure IPA is running (ideally) before uninstalling the KRA

2021-02-04 01:29:53 +01:00

krainstance.py

Change KRA profiles in certmonger tracking so they can renew

2020-12-01 12:56:03 +01:00

krbinstance.py

Ensure that KDC cert has SAN DNS entry

2021-01-29 13:36:41 -05:00

ldapupdate.py

Remove magic sleep from create_index_task

2020-10-05 15:02:14 +02:00

odsexporterinstance.py

odsexporterinstance: use late binding for UID/GID resolution

2020-12-22 14:05:13 +02:00

opendnssecinstance.py

opendnssecinstance: use late binding for UID/GID resolution

2020-12-22 14:05:13 +02:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

schemaupdate.py

Unify access to FQDN

2020-10-26 17:11:19 +11:00

service.py

service: handle empty list of services to update their state

2020-12-18 13:33:44 +02:00

sysupgrade.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

upgradeinstance.py

Move where the restore state is marked during IPA server upgrade

2020-12-02 14:08:51 +02:00