[Freeipa-devel] [PATCH] add signing cert profile to installer

Rob Crittenden rcritten at redhat.com
Mon May 4 20:56:48 UTC 2009


Jason Gerard DeRose wrote:
> On Fri, 2009-04-17 at 17:18 -0400, Rob Crittenden wrote:
>> Rob Crittenden wrote:
>>> This patch adds a signing cert profile to dogtag that we use to generate 
>>> an object signing cert that will work with signtool. We use this to 
>>> create the signed jar file in order to do autoconfiguration in Firefox.
>>>
>>> This patch also does some file permission cleanup and fixes a few 
>>> leaking fds.
>>>
>> I goofed on the commit. It only contained the new file. Here is a 
>> revised patch.
>>
>> rob
> 
> ack.  There are aspects of this patch that I don't fully understand as I
> still haven't delved into the installer much, but as far as I can tell
> this all looks shiny.

pushed to master

> 
> One note to all of us, I think eventually we still need to relocate the
> modules in ipapython into ipalib and/or ipaserver... unless there is a
> compelling reason they should be in their own package.
> 

The reason it is there now it is it is common code for the server and 
client but isn't quite framework code.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20090504/4ed2fe26/attachment.bin>


More information about the Freeipa-devel mailing list