Florence Blanc-Renaud fb74866680 CA-less install: non-ASCII chars in CA cert subject ...

In a CA-less install, if the CA cert subject contains
non-ascii characters, ipa-server-install fails when
configuring SSL for httpd.

The issue happens when calling ipautil.run to extract the keys
from a p12file. The code is using the raw output of the command
and doesn't need to specify capture_output=True, as this option
breaks if the output contains non-ascii characters.
The raw_output contains bytes, the output is a str built by decoding
the raw_output and may fail if non-ascii characters are present.

Fixes: https://pagure.io/freeipa/issue/8880
Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Francois Cami <fcami@redhat.com>

2021-06-16 11:25:08 -04:00

..

plugins

Move constants, document timeout loop

2021-05-12 13:29:31 -04:00

server

LDAP autobind authenticateAsDN for BIND named

2021-06-15 14:13:16 +03:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrust.py

Use api.env.container_sysaccounts

2020-04-28 11:28:29 +02:00

adtrustinstance.py

uninstall: Don't fail on missing /var/lib/samba

2020-08-17 10:46:23 +02:00

bindinstance.py

LDAP autobind authenticateAsDN for BIND named

2021-06-15 14:13:16 +03:00

ca.py

Remove the option stop_certmonger from stop_tracking_*

2021-02-15 17:13:53 +02:00

cainstance.py

pkispawn: override AJP connector address

2021-05-26 17:04:56 +03:00

certs.py

CA-less install: non-ASCII chars in CA cert subject

2021-06-16 11:25:08 -04:00

conncheck.py

install: introduce installer class hierarchy

2016-11-11 12:17:25 +01:00

custodiainstance.py

Add user and group wrappers

2020-09-22 09:23:18 -04:00

dns.py

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

dnskeysyncinstance.py

dnskeysyncinstance: use late binding for UID/GID resolution

2020-12-22 14:05:13 +02:00

dogtag.py

Verify pki ini override early

2019-04-10 13:43:23 +02:00

dogtaginstance.py

pkispawn: Make timeout consistent with IPA's startup_timeout

2021-05-06 11:05:14 -04:00

dsinstance.py

ds: Support renaming of a replication plugin in 389-ds

2021-06-01 17:09:28 +03:00

httpinstance.py

cleanup: Drop never used path for httpd's ccache

2021-03-04 14:17:01 +02:00

installutils.py

Avoid comparing 'max' with 'max\n'.

2021-03-23 08:35:32 +01:00

ipa_acme_manage.py

ipa-acme-manage: user a cookie created for the communication with dogtag REST endpoints

2020-11-17 18:48:24 +02:00

ipa_backup.py

BIND: Setup logging

2021-05-25 10:45:49 +03:00

ipa_cacert_manage.py

ipa-cacert-manage: add prune option

2021-02-12 14:08:11 -05:00

ipa_cert_fix.py

ipa-cert-fix man page: add note about certmonger renewal

2021-06-10 20:59:27 +02:00

ipa_crlgen_manage.py

CRL generation master: new utility to enable|disable

2019-03-14 09:39:55 +01:00

ipa_kra_install.py

Change FreeIPA references to IPA and Identity Management

2021-01-21 13:51:45 +01:00

ipa_ldap_updater.py

Remove -s option from ipa-ldap-updater usage

2021-05-20 14:45:27 -04:00

ipa_otptoken_import.py

Py3: Remove subclassing from object

2018-09-27 11:49:04 +02:00

ipa_pkinit_manage.py

PKINIT: fix ipa-pkinit-manage enable|disable

2018-12-05 11:06:21 +01:00

ipa_replica_install.py

Enable replica install info logging to match ipa-server-install

2018-11-01 13:08:58 +01:00

ipa_restore.py

LDAP autobind authenticateAsDN for BIND named

2021-06-15 14:13:16 +03:00

ipa_server_certinstall.py

Require an ipa-ca SAN on 3rd party certs if ACME is enabled

2020-11-02 14:01:05 -05:00

ipa_server_install.py

Improve console logging for ipa-server-install

2018-06-20 08:38:03 +02:00

ipa_server_upgrade.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipa_trust_enable_agent.py

ipa-adtrust-install: run remote configuration for new agents

2020-03-05 14:40:58 +01:00

ipa_winsync_migrate.py

ipa commands: print 'IPA is not configured' when ipa is not setup

2018-08-23 12:08:45 +02:00

ipactl.py

Ensure IPA is running (ideally) before uninstalling the KRA

2021-02-04 01:29:53 +01:00

kra.py

Ensure IPA is running (ideally) before uninstalling the KRA

2021-02-04 01:29:53 +01:00

krainstance.py

Change KRA profiles in certmonger tracking so they can renew

2020-12-01 12:56:03 +01:00

krbinstance.py

Ensure that KDC cert has SAN DNS entry

2021-01-29 13:36:41 -05:00

ldapupdate.py

LDAP autobind authenticateAsDN for BIND named

2021-06-15 14:13:16 +03:00

odsexporterinstance.py

odsexporterinstance: use late binding for UID/GID resolution

2020-12-22 14:05:13 +02:00

opendnssecinstance.py

opendnssecinstance: use late binding for UID/GID resolution

2020-12-22 14:05:13 +02:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

ds: Support renaming of a replication plugin in 389-ds

2021-06-01 17:09:28 +03:00

schemaupdate.py

Unify access to FQDN

2020-10-26 17:11:19 +11:00

service.py

LDAP autobind authenticateAsDN for BIND named

2021-06-15 14:13:16 +03:00

sysupgrade.py

Add absolute_import future imports

2018-04-20 09:43:37 +02:00

upgradeinstance.py

ds: Support renaming of a replication plugin in 389-ds

2021-06-01 17:09:28 +03:00