Move RA agent certificate file export to a different location

HTTPS connection to certificate server requires client authentication
so we need a file with client certificate and private key prior to
its first occurence which happens during migration of certificate
profiles to LDAP.

https://fedorahosted.org/freeipa/ticket/5695
https://fedorahosted.org/freeipa/ticket/6392

Reviewed-By: Jan Cholasta <jcholast@redhat.com>
This commit is contained in:
Stanislav Laznicka authored and Jan Cholasta committed 2017-03-01 09:43:41 +00:00
1 parent dfd560a190
commit 2a1494c9ae
8 files changed
+17 -19

No files matched your search

+2 -2
View File
@@ -29,7 +29,7 @@ import traceback
from ipalib.install.kinit import kinit_keytab
from ipalib import api
from ipaserver.install import certs, cainstance, krainstance
from ipaserver.install import certs, cainstance, dogtaginstance
from ipaplatform.paths import paths
@@ -61,7 +61,7 @@ def _main():
cainstance.update_people_entry(dercert)
if api.Command.kra_is_enabled()['result']:
krainstance.export_kra_agent_pem()
dogtaginstance.export_ra_agent_pem()
finally:
shutil.rmtree(tmpdir)
api.Backend.ldap2.disconnect()