Re: [Freeipa-devel] [PATCH] 1033 renew CA subsystem certificates

2012-07-30 Thread Jan Cholasta
Dne 27.7.2012 22:50, Rob Crittenden napsal(a): Jan Cholasta wrote: Dne 25.7.2012 22:58, Rob Crittenden napsal(a): Jan Cholasta wrote: All these scripts could use more exception handling, but I guess potential bugs can be sorted out later. Well, they all run in the background so even if

Re: [Freeipa-devel] [PATCH] 1033 renew CA subsystem certificates

2012-07-30 Thread Martin Kosek
On 07/30/2012 10:54 AM, Jan Cholasta wrote: Dne 27.7.2012 22:50, Rob Crittenden napsal(a): Jan Cholasta wrote: Dne 25.7.2012 22:58, Rob Crittenden napsal(a): Jan Cholasta wrote: All these scripts could use more exception handling, but I guess potential bugs can be sorted out later. Well,

Re: [Freeipa-devel] [PATCH] 1033 renew CA subsystem certificates

2012-07-27 Thread Rob Crittenden
Jan Cholasta wrote: Dne 25.7.2012 22:58, Rob Crittenden napsal(a): Jan Cholasta wrote: All these scripts could use more exception handling, but I guess potential bugs can be sorted out later. Well, they all run in the background so even if they caught errors nothing would see them unless we

Re: [Freeipa-devel] [PATCH] 1033 renew CA subsystem certificates

2012-07-26 Thread Jan Cholasta
Dne 25.7.2012 22:58, Rob Crittenden napsal(a): Jan Cholasta wrote: Dne 25.7.2012 16:01, Rob Crittenden napsal(a): Petr Viktorin wrote: On 07/23/2012 10:03 PM, Rob Crittenden wrote: Rob Crittenden wrote: Andrew Wnuk wrote: On 07/16/2012 01:35 PM, Rob Crittenden wrote: Nalin Dahyabhai

Re: [Freeipa-devel] [PATCH] 1033 renew CA subsystem certificates

2012-07-25 Thread Rob Crittenden
Petr Viktorin wrote: On 07/23/2012 10:03 PM, Rob Crittenden wrote: Rob Crittenden wrote: Andrew Wnuk wrote: On 07/16/2012 01:35 PM, Rob Crittenden wrote: Nalin Dahyabhai wrote: On Mon, Jul 16, 2012 at 09:23:24AM -0400, Rob Crittenden wrote: Use the new certmonger capability to be able to

Re: [Freeipa-devel] [PATCH] 1033 renew CA subsystem certificates

2012-07-25 Thread Jan Cholasta
Dne 25.7.2012 16:01, Rob Crittenden napsal(a): Petr Viktorin wrote: On 07/23/2012 10:03 PM, Rob Crittenden wrote: Rob Crittenden wrote: Andrew Wnuk wrote: On 07/16/2012 01:35 PM, Rob Crittenden wrote: Nalin Dahyabhai wrote: On Mon, Jul 16, 2012 at 09:23:24AM -0400, Rob Crittenden wrote:

Re: [Freeipa-devel] [PATCH] 1033 renew CA subsystem certificates

2012-07-24 Thread Petr Viktorin
On 07/23/2012 10:03 PM, Rob Crittenden wrote: Rob Crittenden wrote: Andrew Wnuk wrote: On 07/16/2012 01:35 PM, Rob Crittenden wrote: Nalin Dahyabhai wrote: On Mon, Jul 16, 2012 at 09:23:24AM -0400, Rob Crittenden wrote: Use the new certmonger capability to be able to renew the dogtag

Re: [Freeipa-devel] [PATCH] 1033 renew CA subsystem certificates

2012-07-23 Thread Rob Crittenden
Rob Crittenden wrote: Andrew Wnuk wrote: On 07/16/2012 01:35 PM, Rob Crittenden wrote: Nalin Dahyabhai wrote: On Mon, Jul 16, 2012 at 09:23:24AM -0400, Rob Crittenden wrote: Use the new certmonger capability to be able to renew the dogtag subsystem certificates (audit, OCSP, etc). Are the

[Freeipa-devel] [PATCH] 1033 renew CA subsystem certificates

2012-07-16 Thread Rob Crittenden
Use the new certmonger capability to be able to renew the dogtag subsystem certificates (audit, OCSP, etc). See the ticket for full details. rob From a8932452a1a7343ffe0263183ef63e1efe6a7a6b Mon Sep 17 00:00:00 2001 From: Rob Crittenden rcrit...@redhat.com Date: Wed, 11 Jul 2012 15:51:01 -0400

Re: [Freeipa-devel] [PATCH] 1033 renew CA subsystem certificates

2012-07-16 Thread Nalin Dahyabhai
On Mon, Jul 16, 2012 at 09:23:24AM -0400, Rob Crittenden wrote: Use the new certmonger capability to be able to renew the dogtag subsystem certificates (audit, OCSP, etc). Are the copies of the certificates in the pki-ca CS.cfg file being updated elsewhere? Or is it not turning out to be a

Re: [Freeipa-devel] [PATCH] 1033 renew CA subsystem certificates

2012-07-16 Thread Rob Crittenden
Nalin Dahyabhai wrote: On Mon, Jul 16, 2012 at 09:23:24AM -0400, Rob Crittenden wrote: Use the new certmonger capability to be able to renew the dogtag subsystem certificates (audit, OCSP, etc). Are the copies of the certificates in the pki-ca CS.cfg file being updated elsewhere? Or is it

Re: [Freeipa-devel] [PATCH] 1033 renew CA subsystem certificates

2012-07-16 Thread Andrew Wnuk
On 07/16/2012 01:35 PM, Rob Crittenden wrote: Nalin Dahyabhai wrote: On Mon, Jul 16, 2012 at 09:23:24AM -0400, Rob Crittenden wrote: Use the new certmonger capability to be able to renew the dogtag subsystem certificates (audit, OCSP, etc). Are the copies of the certificates in the pki-ca