Fraser Tweedale b720aa94e9 Update lightweight CA serial after renewal ...

For CA replicas to pick up renewed lightweight CA signing
certificates, the authoritySerial attribute can be updated with the
new serial number.

Update the renew_ca_cert script, which is executed by Certmonger
after writing a renewed CA certificate to the NSSDB, to update the
authoritySerial attribute if the certificate belongs to a
lightweight CA.

Part of: https://fedorahosted.org/freeipa/ticket/4559

Reviewed-By: Jan Cholasta <jcholast@redhat.com>

2016-06-29 08:52:29 +02:00

..

plugins

DNS Locations: dnsserver: put server_id option into named.conf

2016-06-17 15:22:24 +02:00

server

Set default OCSP URI on install and upgrade

2016-06-28 19:15:35 +02:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrustinstance.py

DNS Locations: hide option --no-msdcs in adtrust-install

2016-06-27 13:35:00 +02:00

bindinstance.py

CA replica promotion: add proper CA DNS records

2016-06-28 16:56:35 +02:00

ca.py

DNS Locations: use dns_update_service_records in installers

2016-06-17 15:22:24 +02:00

cainstance.py

Update lightweight CA serial after renewal

2016-06-29 08:52:29 +02:00

certs.py

Increased certmonger timeout

2016-06-20 19:36:45 +02:00

custodiainstance.py

Allow CustodiaClient to be used by arbitrary principals

2016-06-08 10:16:28 +02:00

dns.py

DNS Locations: cleanup of bininstance

2016-06-28 15:23:51 +02:00

dnskeysyncinstance.py

delegate removal of master DNS record and replica keys to separate functions

2016-06-17 18:55:19 +02:00

dogtaginstance.py

Skip CS.cfg update if cert nickname not known

2016-06-29 08:52:29 +02:00

dsinstance.py

Increase nsslapd-db-locks to 50000

2016-06-15 18:14:02 +02:00

httpinstance.py

Configure httpd service from installer instead of directly from RPM

2016-04-22 10:19:25 +02:00

installutils.py

Report missing certificate in external trust chain

2016-06-23 07:36:57 +02:00

ipa_backup.py

Move user/group constants for PKI and DS into ipaplatform

2016-03-22 10:40:44 +01:00

ipa_cacert_manage.py

cacert install: fix trust chain validation

2016-02-24 09:22:59 +01:00

ipa_kra_install.py

Incorrect message when KRA already installed

2016-05-20 16:17:54 +02:00

ipa_ldap_updater.py

Remove unused imports

2015-12-23 07:59:22 +01:00

ipa_otptoken_import.py

pylint: supress false positive no-member errors

2016-03-02 14:57:36 +01:00

ipa_replica_prepare.py

replica-prepare: do not add PTR records if there is no IPA managed reverse zone

2016-04-19 17:07:12 +02:00

ipa_restore.py

ipa_restore: Import only FQDN from ipalib.constants

2016-03-23 10:08:02 +01:00

ipa_server_certinstall.py

Remove unused imports

2015-12-23 07:59:22 +01:00

ipa_server_upgrade.py

Remove unused imports

2015-12-23 07:59:22 +01:00

ipa_winsync_migrate.py

fix incorrect name of ipa-winsync-migrate command in help

2016-03-02 12:52:14 +01:00

kra.py

Modify error message to install first instance of KRA

2015-12-02 17:21:32 +01:00

krainstance.py

Skip CS.cfg update if cert nickname not known

2016-06-29 08:52:29 +02:00

krbinstance.py

set krbcanonicalname on host entry during krbinstance configuration

2016-06-23 09:48:06 +02:00

ldapupdate.py

fix upgrade: wait for proper DS socket after DS restart

2016-02-23 17:35:20 +01:00

memcacheinstance.py

Use absolute imports

2015-08-12 18:17:23 +02:00

ntpinstance.py

Add NTP to the list of services stored in IPA masters LDAP subtree

2016-06-15 13:51:48 +02:00

odsexporterinstance.py

ipaplatform: Move remaining user/group constants to ipaplatform.constants.

2016-03-23 13:32:55 +01:00

opendnssecinstance.py

Use ODS_USER/ODS_GROUP in opendnssec_conf.template

2016-03-23 13:32:55 +01:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

ipa-replica-manage: use server_del when removing domain level 1 replica

2016-06-17 18:55:19 +02:00

schemaupdate.py

Server Upgrade: fix traceback caused by cidict

2015-09-03 14:11:52 +02:00

service.py

Fixes CA always being presented as running

2016-06-15 18:11:28 +02:00

sysupgrade.py

Remove wildcard imports

2015-12-23 07:59:22 +01:00

upgradeinstance.py

Remove wildcard imports

2015-12-23 07:59:22 +01:00