Fraser Tweedale ffb1f5b1f2 Add --ca option to cert-revoke and cert-remove-hold ...

Implement the --ca option for cert-revoke and cert-remove-hold.
Defaults to the IPA CA.  Raise NotFound if the cert with the given
serial was not issued by the nominated CA.

Also default the --ca option of cert-show to the IPA CA.

Add commentary to cert-status to explain why it does not use the
--ca option.

Fixes: https://fedorahosted.org/freeipa/ticket/5999
Reviewed-By: Jan Cholasta <jcholast@redhat.com>

2016-07-01 05:54:56 +02:00

..

advise

ipalib, ipaserver: fix incorrect API.register calls in docstrings

2016-05-25 16:06:26 +02:00

install

Fix ipa-server-certinstall with certs signed by 3rd-party CA

2016-06-30 14:53:37 +02:00

plugins

Add --ca option to cert-revoke and cert-remove-hold

2016-07-01 05:54:56 +02:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc.py

session: move the session module from ipalib to ipaserver

2016-06-30 14:09:24 +02:00

dns_data_management.py

DNS Locations: cleanup of bininstance

2016-06-28 15:23:51 +02:00

rpcserver.py

server: exclude Local commands from RPC

2016-06-30 16:32:20 +02:00

servroles.py

Introduce "NTP server" role

2016-06-15 13:51:48 +02:00

session.py

session: do not initialize session manager on import

2016-06-30 14:09:24 +02:00

topology.py

Fix topologysuffix-verify failing connections

2016-06-24 13:32:02 +02:00