5ab290a Ensure that KDC cert has SAN DNS entry

5 files Authored by cheimes 3 years ago, Committed by frenaud 3 years ago,
    Ensure that KDC cert has SAN DNS entry
    
    The dns parameter of request_and_wait_for_cert() must be a string of
    hostnames.
    
    * Enforce list/tuple type so that API misuse no longer passes silently.
    * Add commonNameToSANDefaultImpl to KDCs_PKINIT_Certs profile
    * Explicitly pass hostname for service certs
    
    Fixes: https://pagure.io/freeipa/issue/8685
    Signed-off-by: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>
    
        
file modified
+3 -1
file modified
+1 -0