Stanislav Laznicka e537686bcc Don't write p11-kit EKU extension object if no EKU ...

b5732efd introduced a regression because it tries to write EKU
that's actually in the CA cert instead of using the LDAP information.
However, when no EKU is available,
IPACertificate.extended_key_usage_bytes still returned at least
EKU_PLACEHOLDER OID to keep the behavior the same as in previous
versions. This caused the EKU_PLACEHOLDER to be written in the
ipa.p11-kit file which made Firefox report FreeIPA Web UI as
improperly configured.

https://pagure.io/freeipa/issue/7119

Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>

2017-09-19 09:42:07 +02:00

..

base

Move tmpfiles.d configuration handling back to spec file

2017-08-30 13:05:23 +02:00

debian

ipaplatform/debian/paths: Add some missing values.

2017-03-15 09:53:08 +01:00

fedora

Break ipaplatform / ipalib import cycle of hell

2016-11-24 16:30:32 +01:00

redhat

Don't write p11-kit EKU extension object if no EKU

2017-09-19 09:42:07 +02:00

rhel

Break ipaplatform / ipalib import cycle of hell

2016-11-24 16:30:32 +01:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Remove NSPRError exception from platform tasks

2017-03-01 15:58:59 +01:00