September 2017 - FreeIPA-devel - Fedora Mailing-Lists

[freeipa PR#1090][opened] Don't write p11-kit EKU extension object if no EKU

by stlaz

URL: https://github.com/freeipa/freeipa/pull/1090 Author: stlaz Title: #1090: Don't write p11-kit EKU extension object if no EKU Action: opened PR body: """ b5732efd introduced a regression because it tries to write EKU that's actually in the CA cert instead of using the LDAP information. However, when no EKU is available, IPACertificate.extended_key_usage_bytes still returned at least EKU_PLACEHOLDER OID to keep the behavior the same as in previous versions. This caused the EKU_PLACEHOLDER to be written in the ipa.p11-kit file which made Firefox report FreeIPA Web UI as improperly configured. https://pagure.io/freeipa/issue/7119 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1090/head:pr1090 git checkout pr1090

6 years, 7 months

1
1
0 / 0

[freeipa PR#1045][opened] Fix ipa-server-upgrade with server cert tracking

by flo-renaud

URL: https://github.com/freeipa/freeipa/pull/1045 Author: flo-renaud Title: #1045: Fix ipa-server-upgrade with server cert tracking Action: opened PR body: """ ipa-server-upgrade fails with Server-Cert not found, when trying to track httpd/ldap server certificates. There are 2 issues in the upgrade: - the certificates should be tracked only if they were issued by IPA CA or IPA lighweight subCA (it is possible to have CA configured but 3rd part certs) - the certificate nickname can be different from Server-Cert The fix provides methods to find the server crt nickname for http and ldap, and a method to check if the server certs are issued by IPA and need to be tracked by certmonger. https://pagure.io/freeipa/issue/7141 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1045/head:pr1045 git checkout pr1045

6 years, 7 months

2
1
0 / 0

[freeipa PR#1089][opened] [Backport][ipa-4-6] Use TLS for the cert-find operation

by stlaz

URL: https://github.com/freeipa/freeipa/pull/1089 Author: stlaz Title: #1089: [Backport][ipa-4-6] Use TLS for the cert-find operation Action: opened PR body: """ This PR was opened automatically because PR #1042 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1089/head:pr1089 git checkout pr1089

6 years, 7 months

1
1
0 / 0

[freeipa PR#1084][opened] Fall back to using configuration to determine server config status

by rcritten

URL: https://github.com/freeipa/freeipa/pull/1084 Author: rcritten Title: #1084: Fall back to using configuration to determine server config status Action: opened PR body: """ The original method for determining whether IPA was configured or not depended on being able to read the sysrestore files which are only readable by root. Add a fallback that uses the IPA config to determine the status. The ldap_uri should only be set on servers and as an extra check look for an ldapi uri. https://pagure.io/freeipa/issue/7157 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1084/head:pr1084 git checkout pr1084

6 years, 7 months

2
1
0 / 0

[freeipa PR#1087][opened] [Backport][ipa-4-5] OTP import: support hash names with HMAC- prefix

by stlaz

URL: https://github.com/freeipa/freeipa/pull/1087 Author: stlaz Title: #1087: [Backport][ipa-4-5] OTP import: support hash names with HMAC- prefix Action: opened PR body: """ This PR was opened automatically because PR #1081 was pushed to master and backport to ipa-4-5 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1087/head:pr1087 git checkout pr1087

6 years, 7 months

1
1
0 / 0

[freeipa PR#1086][opened] [Backport][ipa-4-6] OTP import: support hash names with HMAC- prefix

by stlaz

URL: https://github.com/freeipa/freeipa/pull/1086 Author: stlaz Title: #1086: [Backport][ipa-4-6] OTP import: support hash names with HMAC- prefix Action: opened PR body: """ This PR was opened automatically because PR #1081 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1086/head:pr1086 git checkout pr1086

6 years, 7 months

1
1
0 / 0

[freeipa PR#1088][opened] [Backport][ipa-4-6] pylint: fix missing module on F27+

by stlaz

URL: https://github.com/freeipa/freeipa/pull/1088 Author: stlaz Title: #1088: [Backport][ipa-4-6] pylint: fix missing module on F27+ Action: opened PR body: """ This PR was opened automatically because PR #1085 was pushed to master and backport to ipa-4-6 is required. """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1088/head:pr1088 git checkout pr1088

6 years, 7 months

1
1
0 / 0

[freeipa PR#1042][opened] Use TLS for the cert-find operation

by rcritten

URL: https://github.com/freeipa/freeipa/pull/1042 Author: rcritten Title: #1042: Use TLS for the cert-find operation Action: opened PR body: """ Switch from using urllib.request to dogtag.https_request https://pagure.io/freeipa/issue/7027 Signed-off-by: Rob Crittenden <rcritten(a)redhat.com> """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1042/head:pr1042 git checkout pr1042

6 years, 7 months

2
1
0 / 0

[freeipa PR#1085][opened] pylint: fix missing module on F27+

by stlaz

URL: https://github.com/freeipa/freeipa/pull/1085 Author: stlaz Title: #1085: pylint: fix missing module on F27+ Action: opened PR body: """ `requests.packages` contains but a weird backward compatibility fix for its presumed `urllib3` submodule but pylint does not approve. ----------------------- This fixes https://travis-ci.org/stlaz/freeipa/jobs/276586970 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1085/head:pr1085 git checkout pr1085

6 years, 7 months

1
1
0 / 0

[freeipa PR#1081][opened] OTP import: support hash names with HMAC- prefix

by abbra

URL: https://github.com/freeipa/freeipa/pull/1081 Author: abbra Title: #1081: OTP import: support hash names with HMAC- prefix Action: opened PR body: """ Refactor convertHashName() method to accept hash names prefixed with HMAC- or any other prefix. Extending the method should be easier in future. Fixes https://pagure.io/freeipa/issue/7146 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/1081/head:pr1081 git checkout pr1081

6 years, 7 months

2
1
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

FreeIPA-devel September 2017