URL: https://github.com/freeipa/freeipa/pull/1353
Author: tiran
Title: #1353: Add script to regenerate Custodia keys and config
Action: opened
PR body:
"""
/usr/libexec/ipa/ipa-custodia-regen can be used to recover from broken
ipa-custodia keys and configuration. It removes existing config and
server key files, regenerates new files and uploads the new public keys
to LDAP.
https://pagure.io/freeipa/issue/6893
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1353/head:pr1353
git checkout pr1353
URL: https://github.com/freeipa/freeipa/pull/1427
Author: justin-stephenson
Title: #1427: Skip zone overlap check with auto-reverse
Action: opened
PR body:
"""
Skip the existing reverse zone overlap check during DNS installation
when both `--auto-reverse` and `--allow-zone-overlap` arguments are
provided together.
https://pagure.io/freeipa/issue/7239
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1427/head:pr1427
git checkout pr1427
URL: https://github.com/freeipa/freeipa/pull/1559
Author: tiran
Title: #1559: test_dnssec: re-add named-pkcs11 workarounds
Action: opened
PR body:
"""
DNSSEC tests starrted to fail again, probably due to a bug in
some underlaying component.
This reverts commit 8bc677512296a7e94c29edd0c1a96aa7273f352a
and makes the xfail test check less strict - it will no longer
mark the test suite red if it passes.
Related https://pagure.io/freeipa/issue/5348
Clone of @tomaskrizek PR #973
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1559/head:pr1559
git checkout pr1559
URL: https://github.com/freeipa/freeipa/pull/1700
Author: ipilcher
Title: #1700: Allow issuing certificates with IP addresses in subjectAltName
Action: opened
PR body:
"""
Allow issuing certificates with IP addresses in the subject
alternative name (SAN), if all of the following are true.
* One of the DNS names in the SAN resolves to the IP address
(possibly through a CNAME).
* All of the DNS entries in the resolution chain are managed by
this IPA instance.
* The IP address has a (correct) reverse DNS entry that is managed
by this IPA instance
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1700/head:pr1700
git checkout pr1700
URL: https://github.com/freeipa/freeipa/pull/1421
Author: amitkumar50
Title: #1421: Modifying --subject field in 'ipa help cert_find'
Action: opened
PR body:
"""
ipa cert_find command has an option called --subject.
The option is documented as --subject=STR Subject.
It is expected that a --subject option searches by X.509 subject field but it does not do so.
It searches for CN not cert subject. Hence changing content of --subject help option.
Resolves: https://pagure.io/freeipa/issue/7322
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1421/head:pr1421
git checkout pr1421
URL: https://github.com/freeipa/freeipa/pull/1515
Author: mrizwan93
Title: #1515: Test to check second replica installation after master restore
Action: opened
PR body:
"""
When master is restored from backup and replica1 is re-initialize,
second replica installation was failing. The issue was with ipa-backup
tool which was not backing up the /etc/ipa/custodia/custodia.conf and
/etc/ipa/custodia/server.keys.
related ticket: https://pagure.io/freeipa/issue/7247
Signed-off-by: Mohammad Rizwan Yusuf <myusuf(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1515/head:pr1515
git checkout pr1515