Re: [Freeipa-devel] [PATCHES] 172-196 Refactor certificate renewal code

2014-03-25 Thread Petr Viktorin
On 03/25/2014 03:05 PM, Jan Cholasta wrote: On 21.3.2014 09:46, Petr Viktorin wrote: On 03/19/2014 02:33 PM, Jan Cholasta wrote: [...] Updated patches attached. Note that I changed the path for CSR export to /var/lib/ipa/ca.csr to make it more SELinux-friendly (not in the policy yet, see

Re: [Freeipa-devel] [PATCHES] 172-196 Refactor certificate renewal code

2014-03-25 Thread Petr Viktorin
On 03/25/2014 04:12 PM, Jan Cholasta wrote: On 25.3.2014 16:07, Petr Viktorin wrote: On 03/25/2014 03:05 PM, Jan Cholasta wrote: On 21.3.2014 09:46, Petr Viktorin wrote: On 03/19/2014 02:33 PM, Jan Cholasta wrote: [...] Updated patches attached. Note that I changed the path for CSR export

Re: [Freeipa-devel] [PATCHES] 172-196 Refactor certificate renewal code

2014-03-21 Thread Petr Viktorin
On 03/19/2014 02:33 PM, Jan Cholasta wrote: On 13.3.2014 13:41, Jan Cholasta wrote: On 12.3.2014 19:59, Petr Viktorin wrote: Certmonger is not configured/started in CA-less installs. That's expected. I tested fresh installs and upgrades; renewals work fine for me. 161-184 look OK 185:

Re: [Freeipa-devel] [PATCHES] 172-196 Refactor certificate renewal code

2014-03-20 Thread Petr Spacek
On 19.3.2014 14:33, Jan Cholasta wrote: freeipa-jcholast-190.2-Store-information-about-which-CA-server-is-master-in.patch From 147ab524032902f29b8c3048cdaf21c5606f2274 Mon Sep 17 00:00:00 2001 From: Jan Cholastajchol...@redhat.com Date: Wed, 16 Oct 2013 08:51:06 + Subject: [PATCH 17/23]

Re: [Freeipa-devel] [PATCHES] 172-196 Refactor certificate renewal code

2014-03-13 Thread Jan Cholasta
On 12.3.2014 19:59, Petr Viktorin wrote: On 03/10/2014 01:03 PM, Jan Cholasta wrote: On 17.10.2013 18:59, Jan Cholasta wrote: On 17.10.2013 18:01, Petr Viktorin wrote: On 10/17/2013 02:21 PM, Jan Cholasta wrote: Hi, this patchset contains refactoring of the certificate renewal code, which

Re: [Freeipa-devel] [PATCHES] 172-196 Refactor certificate renewal code

2014-03-12 Thread Petr Viktorin
On 03/10/2014 01:03 PM, Jan Cholasta wrote: On 17.10.2013 18:59, Jan Cholasta wrote: On 17.10.2013 18:01, Petr Viktorin wrote: On 10/17/2013 02:21 PM, Jan Cholasta wrote: Hi, this patchset contains refactoring of the certificate renewal code, which will be the base for CA certificate

Re: [Freeipa-devel] [PATCHES] 172-196 Refactor certificate renewal code

2013-10-17 Thread Petr Viktorin
On 10/17/2013 02:21 PM, Jan Cholasta wrote: Hi, this patchset contains refactoring of the certificate renewal code, which will be the base for CA certificate renewal. The biggest change is a new certmonger CA helper dogtag-ipa-ca-renew-agent, which replaces dogtag-ipa-retrieve-agent-submit as

Re: [Freeipa-devel] [PATCHES] 172-196 Refactor certificate renewal code

2013-10-17 Thread Jan Cholasta
On 17.10.2013 18:01, Petr Viktorin wrote: On 10/17/2013 02:21 PM, Jan Cholasta wrote: Hi, this patchset contains refactoring of the certificate renewal code, which will be the base for CA certificate renewal. The biggest change is a new certmonger CA helper dogtag-ipa-ca-renew-agent, which