Commit - freeipa - dccb2e0eb8953e449dadc344aaa7cd0d173b9717

freeipa

`dccb2e0` Allow issuing certificates with IP addresses in subjectAltName

1 file Authored by ipilcher 5 years ago, Committed by frenaud 5 years ago,

raw patch tree parent

1 file changed. 128 lines added. 2 lines removed.

    Allow issuing certificates with IP addresses in subjectAltName
    
    Allow issuing certificates with IP addresses in the subject
    alternative name (SAN), if all of the following are true.
    
    * One of the DNS names in the SAN resolves to the IP address
      (possibly through a CNAME).
    * All of the DNS entries in the resolution chain are managed by
      this IPA instance.
    * The IP address has a (correct) reverse DNS entry that is managed
      by this IPA instance
    
    https://pagure.io/freeipa/issue/7451
    
    Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>

ipaserver/plugins/cert.py

file modified

+128 -2

freeipa

Source Code

dccb2e0 Allow issuing certificates with IP addresses in subjectAltName

1 file Authored by ipilcher 5 years ago, Committed by frenaud 5 years ago,

`dccb2e0` Allow issuing certificates with IP addresses in subjectAltName