Florence Blanc-Renaud 87540fe1ef Fix ipa-server-upgrade with server cert tracking ...

ipa-server-upgrade fails with Server-Cert not found, when trying to
track httpd/ldap server certificates. There are 2 issues in the upgrade:
- the certificates should be tracked only if they were issued by IPA CA
(it is possible to have CA configured but 3rd part certs)
- the certificate nickname can be different from Server-Cert

The fix provides methods to find the server crt nickname for http and ldap,
and a method to check if the server certs are issued by IPA and need to be
tracked by certmonger.

https://pagure.io/freeipa/issue/7141

Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>

2017-09-19 09:34:31 +02:00

..

advise

logging: do not log into the root logger

2017-07-14 15:55:59 +02:00

dnssec

dnssec: fix localhsm.py utility script

2017-08-30 16:00:23 +02:00

install

Fix ipa-server-upgrade with server cert tracking

2017-09-19 09:34:31 +02:00

plugins

Use TLS for the cert-find operation

2017-09-18 11:44:08 +02:00

secrets

pylint: fix missing module

2017-09-18 11:41:15 +02:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc.py

py3: set samba dependencies

2017-09-14 14:06:09 +02:00

dns_data_management.py

DNS update: reduce timeout for CA records

2017-08-30 13:02:59 +02:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

p11helper.py

py3: softhsm key_id must be bytes

2017-06-01 09:24:24 +02:00

rpcserver.py

rpcserver: don't call xmlserver.Command

2017-09-08 15:42:07 +02:00

servroles.py

Do not remove the old masters when setting the attribute fails

2017-07-04 14:42:43 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Turn on NSSOCSP check in mod_nss conf

2017-05-10 09:08:34 +02:00

topology.py

fix incorrect suffix handling in topology checks

2017-06-05 18:37:37 +02:00