2 Commits

Include renames

Author	SHA1	Message	Date
Alexander Bokovoy	9c3fad9cef	krb5: make sure KDC certificate is readable ... When requesting certificate for KDC profile, make sure its public part is actually readable to others. Fixes https://pagure.io/freeipa/issue/6973 Reviewed-By: Simo Sorce <ssorce@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com>	2017-05-25 14:25:01 +02:00
Jan Cholasta	f769045f0a	server install: fix KDC PKINIT configuration ... Set `pkinit_pool` in `kdc.conf` to a CA certificate bundle of all CAs known to IPA. Make sure `cacert.pem` is exported in all installation code paths. Use the KDC certificate itself as a PKINIT anchor in `login_password`. https://pagure.io/freeipa/issue/6831 Reviewed-By: Stanislav Laznicka <slaznick@redhat.com> Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>	2017-05-19 12:31:24 +02:00