Petr Vobornik c19196a0d3 kerberos session: use CA cert with full cert chain for obtaining cookie ...

Http request performed in finalize_kerberos_acquisition doesn't use
CA certificate/certificate store with full certificate chain of IPA server.
So it might happen that in case that IPA is installed with externally signed
CA certificate, the call can fail because of certificate validation
and e.g. prevent session acquisition.

If it will fail for sure is not known - the use case was not discovered,
but it is faster and safer to fix preemptively.

https://pagure.io/freeipa/issue/6876

Reviewed-By: Martin Basti <mbasti@redhat.com>

2017-05-02 13:42:52 +02:00

..

advise

scripts, tests: explicitly set confdir in the rest of server code

2017-02-22 08:07:48 +00:00

dnssec

Fix PKCS11 helper

2017-04-12 09:54:10 +02:00

install

restore: restart/reload gssproxy after restore

2017-04-28 14:56:02 +02:00

plugins

Vault: Explicitly default to 3DES CBC

2017-04-28 08:25:03 +02:00

secrets

Use Custodia 0.3.1 features

2017-03-28 15:02:06 +02:00

__init__.py

Change FreeIPA license to GPLv3+

2010-12-20 17:19:53 -05:00

dcerpc.py

ipaserver/dcerpc: unify error processing

2017-04-11 14:16:39 +02:00

dns_data_management.py

Fix compatibility with python-dns 1.15.0

2016-10-11 15:45:41 +02:00

Makefile.am

Build: Makefiles for Python packages

2016-11-09 13:08:32 +01:00

p11helper.py

Fix PKCS11 helper

2017-04-12 09:54:10 +02:00

rpcserver.py

kerberos session: use CA cert with full cert chain for obtaining cookie

2017-05-02 13:42:52 +02:00

servroles.py

Introduce "NTP server" role

2016-06-15 13:51:48 +02:00

setup.cfg

Port all setup.py to setuptools

2016-10-20 18:43:37 +02:00

setup.py

Correct PyPI package dependencies

2017-04-26 12:31:11 +02:00

topology.py

Fix topologysuffix-verify failing connections

2016-06-24 13:32:02 +02:00