[Freeipa-devel] [freeipa PR#874][+pushed] Changing cert-find to go through the proxy instead of using the port 8080
URL: https://github.com/freeipa/freeipa/pull/874 Title: #874: Changing cert-find to go through the proxy instead of using the port 8080 Label: +pushed ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#874][closed] Changing cert-find to go through the proxy instead of using the port 8080
URL: https://github.com/freeipa/freeipa/pull/874 Author: felipevolpone Title: #874: Changing cert-find to go through the proxy instead of using the port 8080 Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/874/head:pr874 git checkout pr874 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#874][comment] Changing cert-find to go through the proxy instead of using the port 8080
URL: https://github.com/freeipa/freeipa/pull/874 Title: #874: Changing cert-find to go through the proxy instead of using the port 8080 tomaskrizek commented: """ master: * 36532031cfef893aa2f95d709efd807729de79f7 Changing cert-find to go through the proxy instead of using the port 8080 ipa-4-5: * 960b9a3f1b1637c0ea5b11d6d7f671a09a3e89da Changing cert-find to go through the proxy instead of using the port 8080 """ See the full comment at https://github.com/freeipa/freeipa/pull/874#issuecomment-308949940 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#876][opened] python-netifaces: update to reflect upstream changes
URL: https://github.com/freeipa/freeipa/pull/876 Author: MartinBasti Title: #876: python-netifaces: update to reflect upstream changes Action: opened PR body: """ python-netifaces now provides IPv6 netmask in format mask/prefix. It breaks freeipa as it is unexpected format for python-netaddr. We must split netmask and provide only prefix for netaddr. https://pagure.io/freeipa/issue/7021 """ To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/876/head:pr876 git checkout pr876 From f4d58ce97252eb891e1c8158927547b2e174edd8 Mon Sep 17 00:00:00 2001 From: Martin Basti Date: Fri, 16 Jun 2017 13:42:53 +0200 Subject: [PATCH] python-netifaces: update to reflect upstream changes python-netifaces now provides IPv6 netmask in format mask/prefix. It breaks freeipa as it is unexpected format for python-netaddr. We must split netmask and provide only prefix for netaddr. https://pagure.io/freeipa/issue/7021 --- ipapython/ipautil.py | 7 ++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/ipapython/ipautil.py b/ipapython/ipautil.py index a277ed8747..02c32381ab 100644 --- a/ipapython/ipautil.py +++ b/ipapython/ipautil.py @@ -212,9 +212,14 @@ def get_matching_interface(self): # errors in IPNetwork ifaddr = ifdata['addr'].split(u'%', 1)[0] +# newer versions of netifaces provide IPv6 netmask in format +# ':::::/64'. We have to split and use prefix +# or the netmask with older versions +ifmask = ifdata['netmask'].split(u'/')[-1] + ifnet = netaddr.IPNetwork('{addr}/{netmask}'.format( addr=ifaddr, -netmask=ifdata['netmask'] +netmask=ifmask )) if ifnet == self._net or ( self._net is None and ifnet.ip == self): ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#781][edited] Warn in cert-request if CSR doesn't contain SAN
URL: https://github.com/freeipa/freeipa/pull/781 Author: felipevolpone Title: #781: Warn in cert-request if CSR doesn't contain SAN Action: edited Changed field: title Original value: """ [WIP] Warn in cert-request if CSR doesn't contain SAN """ ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#876][comment] python-netifaces: update to reflect upstream changes
URL: https://github.com/freeipa/freeipa/pull/876 Title: #876: python-netifaces: update to reflect upstream changes martbab commented: """ Shouldn't we bump requires on python-netifaces so that we don't accidentally pull in the older version that can break this new code? """ See the full comment at https://github.com/freeipa/freeipa/pull/876#issuecomment-309006143 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#876][comment] python-netifaces: update to reflect upstream changes
URL: https://github.com/freeipa/freeipa/pull/876 Title: #876: python-netifaces: update to reflect upstream changes pvoborni commented: """ Could the checked addresses(input from netifaces) be logged? It is easier to debug if something goes wrong. """ See the full comment at https://github.com/freeipa/freeipa/pull/876#issuecomment-309009672 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#876][comment] python-netifaces: update to reflect upstream changes
URL: https://github.com/freeipa/freeipa/pull/876 Title: #876: python-netifaces: update to reflect upstream changes MartinBasti commented: """ @martbab should work with both versions, I don't want to bump requires for this @pvoborni It could, I'll update PR """ See the full comment at https://github.com/freeipa/freeipa/pull/876#issuecomment-309011126 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#802][+ack] Improve cert messages some more + do that for KDC certs as well
URL: https://github.com/freeipa/freeipa/pull/802 Title: #802: Improve cert messages some more + do that for KDC certs as well Label: +ack ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#802][comment] Improve cert messages some more + do that for KDC certs as well
URL: https://github.com/freeipa/freeipa/pull/802 Title: #802: Improve cert messages some more + do that for KDC certs as well martbab commented: """ master: * f827fe0f19596d29f9354368077fb43be2e16e8e cert-validate: keep all messages in cert validation * bee3c1eccd44f7671a1455d12235bcbb910494b3 More verbose error message on kdc cert validation """ See the full comment at https://github.com/freeipa/freeipa/pull/802#issuecomment-309035747 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#802][closed] Improve cert messages some more + do that for KDC certs as well
URL: https://github.com/freeipa/freeipa/pull/802 Author: stlaz Title: #802: Improve cert messages some more + do that for KDC certs as well Action: closed To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/802/head:pr802 git checkout pr802 ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#802][+pushed] Improve cert messages some more + do that for KDC certs as well
URL: https://github.com/freeipa/freeipa/pull/802 Title: #802: Improve cert messages some more + do that for KDC certs as well Label: +pushed ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org
[Freeipa-devel] [freeipa PR#859][+prioritized] Add CommonNameToSANDefault to default cert profile
URL: https://github.com/freeipa/freeipa/pull/859 Title: #859: Add CommonNameToSANDefault to default cert profile Label: +prioritized ___ FreeIPA-devel mailing list -- freeipa-devel@lists.fedorahosted.org To unsubscribe send an email to freeipa-devel-le...@lists.fedorahosted.org