freeipa/install/share/pki-acme-configsources.conf.template

# VERSION 2 - DO NOT REMOVE THIS LINE
engine.class=org.dogtagpki.acme.server.ACMEEngineConfigFileSource
engine.filename=/etc/pki/pki-tomcat/acme/engine.conf
Add versions to the ACME config templates and update on upgrade Put the ACME config files under normal IPA versioning so we can more seamlessly do updates to them. Signed-off-by: Rob Crittenden <rcritten@redhat.com> https://pagure.io/freeipa/issue/8712 Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com> 2021-02-10 13:54:56 -06:00			`# VERSION 2 - DO NOT REMOVE THIS LINE`
acme: configure engine.conf and disable by default When deploying ACME set up configsources.conf to retrieve engine configuration from engine.conf. In the initial configuration, the ACME service is disabled (i.e. it will refuse to service requests). A subsequent commit will add command(s) for flipping the ACME service on or off (on a per-server basis). Later we will move to LDAP configuration so that management of the ACME service is deployment-wide. The default configuration also disables issuance of wildcard certificates. Part of: https://pagure.io/freeipa/issue/4751 Reviewed-By: Rob Crittenden <rcritten@redhat.com> 2020-05-27 23:45:44 -05:00			`engine.class=org.dogtagpki.acme.server.ACMEEngineConfigFileSource`
			`engine.filename=/etc/pki/pki-tomcat/acme/engine.conf`