freeipa/ipaserver
Fraser Tweedale ffb1f5b1f2 Add --ca option to cert-revoke and cert-remove-hold
Implement the --ca option for cert-revoke and cert-remove-hold.
Defaults to the IPA CA.  Raise NotFound if the cert with the given
serial was not issued by the nominated CA.

Also default the --ca option of cert-show to the IPA CA.

Add commentary to cert-status to explain why it does not use the
--ca option.

Fixes: https://fedorahosted.org/freeipa/ticket/5999
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
2016-07-01 05:54:56 +02:00
..
advise ipalib, ipaserver: fix incorrect API.register calls in docstrings 2016-05-25 16:06:26 +02:00
install Fix ipa-server-certinstall with certs signed by 3rd-party CA 2016-06-30 14:53:37 +02:00
plugins Add --ca option to cert-revoke and cert-remove-hold 2016-07-01 05:54:56 +02:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc.py session: move the session module from ipalib to ipaserver 2016-06-30 14:09:24 +02:00
dns_data_management.py DNS Locations: cleanup of bininstance 2016-06-28 15:23:51 +02:00
rpcserver.py server: exclude Local commands from RPC 2016-06-30 16:32:20 +02:00
servroles.py Introduce "NTP server" role 2016-06-15 13:51:48 +02:00
session.py session: do not initialize session manager on import 2016-06-30 14:09:24 +02:00
topology.py Fix topologysuffix-verify failing connections 2016-06-24 13:32:02 +02:00