URL: https://github.com/freeipa/freeipa/pull/1090
Author: stlaz
Title: #1090: Don't write p11-kit EKU extension object if no EKU
Action: opened
PR body:
"""
b5732efd introduced a regression because it tries to write EKU
that's actually in the CA cert instead of using the LDAP information.
However, when no EKU is available,
IPACertificate.extended_key_usage_bytes still returned at least
EKU_PLACEHOLDER OID to keep the behavior the same as in previous
versions. This caused the EKU_PLACEHOLDER to be written in the
ipa.p11-kit file which made Firefox report FreeIPA Web UI as
improperly configured.
https://pagure.io/freeipa/issue/7119
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1090/head:pr1090
git checkout pr1090
URL: https://github.com/freeipa/freeipa/pull/1045
Author: flo-renaud
Title: #1045: Fix ipa-server-upgrade with server cert tracking
Action: opened
PR body:
"""
ipa-server-upgrade fails with Server-Cert not found, when trying to
track httpd/ldap server certificates. There are 2 issues in the upgrade:
- the certificates should be tracked only if they were issued by IPA CA or
IPA lighweight subCA (it is possible to have CA configured but 3rd part certs)
- the certificate nickname can be different from Server-Cert
The fix provides methods to find the server crt nickname for http and ldap,
and a method to check if the server certs are issued by IPA and need to be
tracked by certmonger.
https://pagure.io/freeipa/issue/7141
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1045/head:pr1045
git checkout pr1045
URL: https://github.com/freeipa/freeipa/pull/1089
Author: stlaz
Title: #1089: [Backport][ipa-4-6] Use TLS for the cert-find operation
Action: opened
PR body:
"""
This PR was opened automatically because PR #1042 was pushed to master and backport to ipa-4-6 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1089/head:pr1089
git checkout pr1089
URL: https://github.com/freeipa/freeipa/pull/1084
Author: rcritten
Title: #1084: Fall back to using configuration to determine server config status
Action: opened
PR body:
"""
The original method for determining whether IPA was configured or
not depended on being able to read the sysrestore files which are
only readable by root.
Add a fallback that uses the IPA config to determine the status.
The ldap_uri should only be set on servers and as an extra check
look for an ldapi uri.
https://pagure.io/freeipa/issue/7157
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1084/head:pr1084
git checkout pr1084
URL: https://github.com/freeipa/freeipa/pull/1087
Author: stlaz
Title: #1087: [Backport][ipa-4-5] OTP import: support hash names with HMAC- prefix
Action: opened
PR body:
"""
This PR was opened automatically because PR #1081 was pushed to master and backport to ipa-4-5 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1087/head:pr1087
git checkout pr1087
URL: https://github.com/freeipa/freeipa/pull/1086
Author: stlaz
Title: #1086: [Backport][ipa-4-6] OTP import: support hash names with HMAC- prefix
Action: opened
PR body:
"""
This PR was opened automatically because PR #1081 was pushed to master and backport to ipa-4-6 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1086/head:pr1086
git checkout pr1086
URL: https://github.com/freeipa/freeipa/pull/1088
Author: stlaz
Title: #1088: [Backport][ipa-4-6] pylint: fix missing module on F27+
Action: opened
PR body:
"""
This PR was opened automatically because PR #1085 was pushed to master and backport to ipa-4-6 is required.
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1088/head:pr1088
git checkout pr1088
URL: https://github.com/freeipa/freeipa/pull/1085
Author: stlaz
Title: #1085: pylint: fix missing module on F27+
Action: opened
PR body:
"""
`requests.packages` contains but a weird backward compatibility fix
for its presumed `urllib3` submodule but pylint does not approve.
-----------------------
This fixes https://travis-ci.org/stlaz/freeipa/jobs/276586970
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1085/head:pr1085
git checkout pr1085
URL: https://github.com/freeipa/freeipa/pull/1081
Author: abbra
Title: #1081: OTP import: support hash names with HMAC- prefix
Action: opened
PR body:
"""
Refactor convertHashName() method to accept hash names prefixed with
HMAC- or any other prefix. Extending the method should be easier in
future.
Fixes https://pagure.io/freeipa/issue/7146
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1081/head:pr1081
git checkout pr1081