[Freeipa-devel] [freeipa PR#750][opened] Fixed typo in ipa-client-install help output
URL: https://github.com/freeipa/freeipa/pull/750 Author: tscherf Title: #750: Fixed typo in ipa-client-install help output Action: opened PR body: """ Fixed typo in option "--all-ip-addresses" from "ipa-client-install". """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/750/head:pr750 git checkout pr750 From 74025761b44b7e3456a10f0c6d4b74f4296e577a Mon Sep 17 00:00:00 2001 From: Thorsten Scherf <tsch...@redhat.com> Date: Fri, 28 Apr 2017 16:40:17 +0200 Subject: [PATCH] Fixed typo in ipa-client-install output --- ipalib/install/hostname.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ipalib/install/hostname.py b/ipalib/install/hostname.py index 74c569d..ecc2963 100644 --- a/ipalib/install/hostname.py +++ b/ipalib/install/hostname.py @@ -41,7 +41,7 @@ def ip_addresses(self, values): all_ip_addresses = knob( None, -description="All routable IP addresses configured on any inteface " +description="All routable IP addresses configured on any interface " "will be added to DNS", ) all_ip_addresses = prepare_only(all_ip_addresses) -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
[Freeipa-devel] [freeipa PR#506][synchronized] added ssl verification
URL: https://github.com/freeipa/freeipa/pull/506 Author: tscherf Title: #506: added ssl verification Action: synchronized To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/506/head:pr506 git checkout pr506 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
[Freeipa-devel] [freeipa PR#506][closed] added ssl verification
URL: https://github.com/freeipa/freeipa/pull/506 Author: tscherf Title: #506: added ssl verification Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/506/head:pr506 git checkout pr506 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
[Freeipa-devel] [freeipa PR#506][comment] added ssl verification
URL: https://github.com/freeipa/freeipa/pull/506 Title: #506: added ssl verification tscherf commented: """ When the system wide trust store is supposed to be used here, then something else must be broken somewhere in the verification code. Without explicitly using the IPA trust anchor stored in IPA_CA_CRT, the installer failed with an "[SSL: CERTIFICATE_VERIFY_FAILED]" error. We have seen this in CA-less and chained CA setups. """ See the full comment at https://github.com/freeipa/freeipa/pull/506#issuecomment-282262743 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
[Freeipa-devel] [freeipa PR#506][synchronized] added ssl verification
URL: https://github.com/freeipa/freeipa/pull/506
Author: tscherf
Title: #506: added ssl verification
Action: synchronized
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/506/head:pr506
git checkout pr506
From 051af0fda6e38d6c80db6046fd2c1f686a7f44ca Mon Sep 17 00:00:00 2001
From: Thorsten Scherf <tsch...@redhat.com>
Date: Fri, 24 Feb 2017 11:16:40 +0100
Subject: [PATCH] added ssl verification
https://fedorahosted.org/freeipa/ticket/6686
---
ipaserver/secrets/client.py | 1 +
1 file changed, 1 insertion(+)
diff --git a/ipaserver/secrets/client.py b/ipaserver/secrets/client.py
index a945e01..3c7a055 100644
--- a/ipaserver/secrets/client.py
+++ b/ipaserver/secrets/client.py
@@ -96,6 +96,7 @@ def fetch_key(self, keyname, store=True):
# Perform request
r = requests.get(url, headers=headers,
+ verify=paths.IPA_CA_CRT,
params={'type': 'kem', 'value': request})
r.raise_for_status()
reply = r.json()
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
[Freeipa-devel] [freeipa PR#499][opened] added help about default value for --external-ca-type option
URL: https://github.com/freeipa/freeipa/pull/499
Author: tscherf
Title: #499: added help about default value for --external-ca-type option
Action: opened
PR body:
"""
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/499/head:pr499
git checkout pr499
From 9932ec8f32e0d36af4a4b2a825bb4f1b7cecf540 Mon Sep 17 00:00:00 2001
From: Thorsten Scherf <tsch...@redhat.com>
Date: Thu, 23 Feb 2017 14:09:39 +0100
Subject: [PATCH] added help about default value for --external-ca-type option
---
install/tools/ipa-ca-install | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/install/tools/ipa-ca-install b/install/tools/ipa-ca-install
index 5e425f8..c05abb9 100755
--- a/install/tools/ipa-ca-install
+++ b/install/tools/ipa-ca-install
@@ -65,7 +65,7 @@ def parse_options():
parser.add_option("--external-ca-type", dest="external_ca_type",
type="choice", choices=ext_cas,
metavar="{{{0}}}".format(",".join(ext_cas)),
- help="Type of the external CA")
+ help="Type of the external CA. Default: generic")
parser.add_option("--external-cert-file", dest="external_cert_files",
action="append", metavar="FILE",
help="File containing the IPA CA certificate and the external CA certificate chain")
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
[Freeipa-devel] [freeipa PR#497][closed] added more meaningful help for --external-ca-type option
URL: https://github.com/freeipa/freeipa/pull/497 Author: tscherf Title: #497: added more meaningful help for --external-ca-type option Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/497/head:pr497 git checkout pr497 -- Manage your subscription for the Freeipa-devel mailing list: https://www.redhat.com/mailman/listinfo/freeipa-devel Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
[Freeipa-devel] [freeipa PR#497][opened] added more meaningful help for --external-ca-type option
URL: https://github.com/freeipa/freeipa/pull/497
Author: tscherf
Title: #497: added more meaningful help for --external-ca-type option
Action: opened
PR body:
"""
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/497/head:pr497
git checkout pr497
From f0dccbc6c997e5410f355e96a48bd568658decec Mon Sep 17 00:00:00 2001
From: Thorsten Scherf <tsch...@redhat.com>
Date: Thu, 23 Feb 2017 13:48:29 +0100
Subject: [PATCH] added more meaningful help for --external-ca-type option
---
install/tools/ipa-ca-install | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/install/tools/ipa-ca-install b/install/tools/ipa-ca-install
index 5e425f8..7e29c9a 100755
--- a/install/tools/ipa-ca-install
+++ b/install/tools/ipa-ca-install
@@ -65,7 +65,7 @@ def parse_options():
parser.add_option("--external-ca-type", dest="external_ca_type",
type="choice", choices=ext_cas,
metavar="{{{0}}}".format(",".join(ext_cas)),
- help="Type of the external CA")
+ help="Type of the external CA. Possible values are "generic", "ms-cs". Default value is "generic")
parser.add_option("--external-cert-file", dest="external_cert_files",
action="append", metavar="FILE",
help="File containing the IPA CA certificate and the external CA certificate chain")
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
