Fraser Tweedale b12db92414 Create server and host certs with DNS altname ...

Currently server (HTTP / LDAP) certs are created without a Subject
Alternative Name extension during server install, replica prepare
and host enrolment, a potentially problematic violation of RFC 2818.

Add the hostname as a SAN dNSName when these certs are created.

(Certmonger adds an appropriate request extension when renewing the
certificate, so nothing needs to be done for renewal).

Fixes: https://fedorahosted.org/freeipa/ticket/4970
Reviewed-By: Petr Spacek <pspacek@redhat.com>

2016-07-19 14:18:04 +02:00

..

plugins

DNS install: Ensure that DNS servers container exists

2016-07-15 14:13:32 +02:00

server

Fix upgrade when Dogtag also upgraded from 10.2 -> 10.3

2016-07-01 11:09:53 +02:00

__init__.py

Remove __all__ specifications in ipaclient and ipaserver.install

2013-09-06 15:42:33 +02:00

adtrustinstance.py

DNS Locations: hide option --no-msdcs in adtrust-install

2016-06-27 13:35:00 +02:00

bindinstance.py

DNS install: Ensure that DNS servers container exists

2016-07-15 14:13:32 +02:00

ca.py

DNS Locations: use dns_update_service_records in installers

2016-06-17 15:22:24 +02:00

cainstance.py

uninstall: untrack lightweight CA certs

2016-07-12 10:50:52 +02:00

certs.py

Create server and host certs with DNS altname

2016-07-19 14:18:04 +02:00

custodiainstance.py

Allow CustodiaClient to be used by arbitrary principals

2016-06-08 10:16:28 +02:00

dns.py

DNS Locations: cleanup of bininstance

2016-06-28 15:23:51 +02:00

dnskeysyncinstance.py

delegate removal of master DNS record and replica keys to separate functions

2016-06-17 18:55:19 +02:00

dogtaginstance.py

Skip CS.cfg update if cert nickname not known

2016-06-29 08:52:29 +02:00

dsinstance.py

Increase nsslapd-db-locks to 50000

2016-06-15 18:14:02 +02:00

httpinstance.py

Configure httpd service from installer instead of directly from RPM

2016-04-22 10:19:25 +02:00

installutils.py

Fix internal errors in host-add and other commands caused by DNS resolution

2016-07-01 10:35:39 +02:00

ipa_backup.py

session: move the session module from ipalib to ipaserver

2016-06-30 14:09:24 +02:00

ipa_cacert_manage.py

cacert install: fix trust chain validation

2016-02-24 09:22:59 +01:00

ipa_kra_install.py

Incorrect message when KRA already installed

2016-05-20 16:17:54 +02:00

ipa_ldap_updater.py

Remove unused imports

2015-12-23 07:59:22 +01:00

ipa_otptoken_import.py

pylint: supress false positive no-member errors

2016-03-02 14:57:36 +01:00

ipa_replica_prepare.py

replica-prepare: do not add PTR records if there is no IPA managed reverse zone

2016-04-19 17:07:12 +02:00

ipa_restore.py

backup: use in-server API in ipa-backup and ipa-restore

2016-06-30 11:04:05 +02:00

ipa_server_certinstall.py

Fix ipa-server-certinstall with certs signed by 3rd-party CA

2016-06-30 14:53:37 +02:00

ipa_server_upgrade.py

Remove unused imports

2015-12-23 07:59:22 +01:00

ipa_winsync_migrate.py

fix incorrect name of ipa-winsync-migrate command in help

2016-03-02 12:52:14 +01:00

kra.py

Modify error message to install first instance of KRA

2015-12-02 17:21:32 +01:00

krainstance.py

Skip CS.cfg update if cert nickname not known

2016-06-29 08:52:29 +02:00

krbinstance.py

set krbcanonicalname on host entry during krbinstance configuration

2016-06-23 09:48:06 +02:00

ldapupdate.py

fix upgrade: wait for proper DS socket after DS restart

2016-02-23 17:35:20 +01:00

memcacheinstance.py

Use absolute imports

2015-08-12 18:17:23 +02:00

ntpinstance.py

Add NTP to the list of services stored in IPA masters LDAP subtree

2016-06-15 13:51:48 +02:00

odsexporterinstance.py

ipaplatform: Move remaining user/group constants to ipaplatform.constants.

2016-03-23 13:32:55 +01:00

opendnssecinstance.py

Use ODS_USER/ODS_GROUP in opendnssec_conf.template

2016-03-23 13:32:55 +01:00

otpdinstance.py

Enable pylint missing-final-newline check

2015-12-23 07:59:22 +01:00

replication.py

ipa-replica-manage: use server_del when removing domain level 1 replica

2016-06-17 18:55:19 +02:00

schemaupdate.py

Server Upgrade: fix traceback caused by cidict

2015-09-03 14:11:52 +02:00

service.py

Fixes CA always being presented as running

2016-06-15 18:11:28 +02:00

sysupgrade.py

Remove wildcard imports

2015-12-23 07:59:22 +01:00

upgradeinstance.py

Remove wildcard imports

2015-12-23 07:59:22 +01:00