freeipa/ipalib
Fraser Tweedale fa149cff86 Remove service and host cert issuer validation
When adding certifiates to a host or service entry, we currently
check that the issuer matches the issuer DN of the IPA CA.  Now that
sub-CAs have been implemented, this check is no longer valid and
will cause false negatives.  Remove it and update call sites.

Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
2016-06-06 08:58:01 +02:00
..
__init__.py ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
aci.py ipalib.aci: Port to Python 3 2015-10-13 14:16:32 +02:00
backend.py rpc: specify connection options in API config 2016-06-03 09:00:34 +02:00
base.py Modernize use of range() 2015-09-01 11:42:01 +02:00
capabilities.py dns_name_values capability added 2014-06-03 15:55:32 +02:00
certstore.py Modernize 'except' clauses 2015-08-12 18:17:23 +02:00
cli.py parameters: introduce cli_metavar keyword argument 2016-06-03 09:00:34 +02:00
config.py Fix more bytes/unicode issues 2015-10-22 18:34:46 +02:00
constants.py DNS Locations: location-* commands 2016-06-03 15:58:21 +02:00
crud.py ipalib, ipaserver: fix incorrect API.register calls in docstrings 2016-05-25 16:06:26 +02:00
dns.py dns: move code shared by client and server to separate module 2016-06-03 09:00:34 +02:00
errors.py Turn verify_host_resolvable() into a wrapper around ipapython.dnsutil 2016-05-30 20:14:32 +02:00
frontend.py frontend: do not check API minor version of the client 2016-06-03 09:00:34 +02:00
krb_utils.py pylint: supress false positive no-member errors 2016-03-02 14:57:36 +01:00
Makefile Package ipapython, ipalib, ipaplatform, ipatests for Python 3 2015-12-17 10:52:57 +01:00
messages.py DNS: Warn if forwarding policy conflicts with automatic empty zones 2016-05-30 20:14:32 +02:00
output.py makeapi: optimize API.txt 2016-05-25 16:06:26 +02:00
parameters.py ipalib: replace DeprecatedParam with deprecated Param argument 2016-06-03 09:00:34 +02:00
pkcs10.py Remove unused imports 2015-12-23 07:59:22 +01:00
plugable.py ipaclient: implement thin client 2016-06-03 09:00:34 +02:00
request.py ipalib: provide per-call command context 2016-03-03 10:06:18 +01:00
rpc.py rpc: do not validate command name in RPCClient.forward 2016-06-03 09:00:34 +02:00
session.py Pylint: remove unnecessary-semicolon 2016-03-22 10:20:51 +01:00
setup.py.in ipalib: move server-side plugins to ipaserver 2016-06-03 09:00:34 +02:00
text.py Remove unused imports 2015-12-23 07:59:22 +01:00
util.py dns: move code shared by client and server to separate module 2016-06-03 09:00:34 +02:00
x509.py Remove service and host cert issuer validation 2016-06-06 08:58:01 +02:00