#4416 Move NSS database wrapper code to ipapython
Closed: Fixed None Opened 9 years ago by jcholast.

Currently the code lives in ipaserver.install.certs, which means it can't be used on clients. Move it to ipapython so that it can be used on clients.


master:

  • 231f57c Introduce NSS database /etc/ipa/nssdb
  • 86c534d Move NSSDatabase from ipaserver.certs to ipapython.certdb
  • b764e9d Add NSSDatabase.has_nickname for checking nickname presence in a NSS DB
  • bbf9622 Use NSSDatabase instead of direct certutil calls in client code
  • f40a0ad Use /etc/ipa/nssdb to get nicknames of IPA certs installed in /etc/pki/nssdb
  • 9ab402c Check if IPA client is configured in ipa-certupdate
  • 4e68046 Get server hostname from jsonrpc_uri in ipa-certupdate
  • 734afdf Remove ipa-ca.crt from systemwide CA store on client uninstall and cert update
  • 05e6626 Fix certmonger.wait_for_request
  • da24d8a Fix certmonger search for the CA cert in ipa-certupdate and ipa-cacert-manage

ipa-4-1:

  • ed2bfff Introduce NSS database /etc/ipa/nssdb
  • 017d61d Move NSSDatabase from ipaserver.certs to ipapython.certdb
  • e7b7492 Add NSSDatabase.has_nickname for checking nickname presence in a NSS DB
  • 9c07228 Use NSSDatabase instead of direct certutil calls in client code
  • 483ebf9 Use /etc/ipa/nssdb to get nicknames of IPA certs installed in /etc/pki/nssdb
  • 511dc3a Check if IPA client is configured in ipa-certupdate
  • 6ab1f6c Get server hostname from jsonrpc_uri in ipa-certupdate
  • 9666212 Remove ipa-ca.crt from systemwide CA store on client uninstall and cert update
  • 7da4873 Fix certmonger.wait_for_request
  • d04fa16 Fix certmonger search for the CA cert in ipa-certupdate and ipa-cacert-manage

master:

  • 98c5788 Add missing imports to ipapython.certdb

ipa-4-1:

  • 9d061ea Add missing imports to ipapython.certdb

Metadata Update from @jcholast:
- Issue assigned to jcholast
- Issue set to the milestone: FreeIPA 4.1

7 years ago

Login to comment on this ticket.

Metadata